730584 - Crash linked to Adobe Flash plugin

Status: RESOLVED DUPLICATE of bug 692283

(Firefox :: Untriaged, defect)

Description

[amai]

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:10.0.2) Gecko/20100101 Firefox/10.0.2
Build ID: 2012021500

Steps to reproduce:

Browse on http://varithorn.blogspot.com/


Actual results:

Segfault


Expected results:

No segfault

Comment 1

[amai]

(In reply to amai from comment #0)
I forgot to say: it doesn't crash with the flash plugin disabled.

Comment 2

[Thomas Ahlblom]

WFM with Adobe Flash Player 11.2.202.197:
Mozilla/5.0 (X11; Linux x86_64; rv:10.0.2) Gecko/20100101 Firefox/10.0.2
Mozilla/5.0 (X11; Linux x86_64; rv:13.0) Gecko/20120225 Firefox/13.0a1

Please post the related Report IDs from about:crashes!

Comment 3

[amai]

I have so many crashes/crash reports on my x64-linux nowadays ;-( it's hard to keep an overview. Based from the timestamp it should be
bp-e64a73d6-f1ef-4384-b724-107a12120225
and/or
bp-50b1c9c3-2054-4944-8200-f24502120225

If one presses "Report that Crash" it would be clever if that information would be automatically passed to bugzilla!

Comment 4

[amai]

(In reply to amai from comment #3)
I have debug symbols installed (and gdb also not complaning about missing debuginfo), but those callstacks are not resolved to readable symbols.

Comment 5

[Scoobidiver (away)]

(In reply to amai from comment #3)
> I have so many crashes/crash reports on my x64-linux nowadays
Based on crash stats, you are the only one to crash with that signature.

> If one presses "Report that Crash" it would be clever if that information
> would be automatically passed to bugzilla!
There are 39651 different crash signatures in 10.0.2. It would be hard to know which one is important to fix if there was that feature. Sometimes a crash signature is related to different causes, requiring several bugs. For a human being, it can be sometimes hard to triage with the stack, how a robot could manage that?

(In reply to amai from comment #1)
> I forgot to say: it doesn't crash with the flash plugin disabled.
Did you try with the latest Flash Beta version?

Comment 6

[amai]

bp-686c72ec-e66b-4b38-96c3-6c09c2120229 is for sure the crash for the given website.

Comment 7

[Scoobidiver (away)]

Does it happen in Safe Mode (see https://support.mozilla.org/en-US/kb/Safe%20Mode)?
Does it happen with a new profile (see https://support.mozilla.org/en-US/kb/Managing-profiles)?
Does it happen with Flash 11.2 RC 1 you can download from http://labs.adobe.com/downloads/flashplayer11-2.html?

Comment 8

[amai]

(In reply to Scoobidiver from comment #7)
Safe-mode crash: bp-dcd73ccf-cbd6-4ec6-a67b-3d72b2120302

Comment 9

[Scoobidiver (away)]

(In reply to amai from comment #8)
> Safe-mode crash: bp-dcd73ccf-cbd6-4ec6-a67b-3d72b2120302
So it's not caused by HW acceleration or an extension.

Please, can you test with a new profile?

Comment 10

[amai]

(In reply to Scoobidiver from comment #9)
With new profile I don't see that crash so far!

Comment 11

[amai]

Readable callstack, with existing profile, non-safe-mode:

program received signal SIGSEGV, Segmentation fault.
0x00007ffff50e7a51 in nsObjectFrame::CallSetWindow (this=0x7fffd96b6f48, aCheckIsHidden=<optimized out>) at /usr/src/debug/mozilla/layout/generic/nsObjectFrame.cpp:844
844       instanceOwnerRef->ReleasePluginPort(window->window);
(gdb) bt
#0  0x00007ffff50e7a51 in nsObjectFrame::CallSetWindow (this=0x7fffd96b6f48, aCheckIsHidden=<optimized out>)
    at /usr/src/debug/mozilla/layout/generic/nsObjectFrame.cpp:844
#1  0x00007ffff572ba6b in nsPluginHost::InstantiateEmbeddedPlugin (this=0x7fffe2b33e80, aMimeType=<optimized out>, aURL=
    0x7fffcdd55240, aOwner=0x7fffe64821c0) at /usr/src/debug/mozilla/dom/plugins/base/nsPluginHost.cpp:1085
#2  0x00007ffff50e64b0 in nsObjectFrame::InstantiatePlugin (this=0x7fffd96b6f48, aPluginHost=0x7fffe2b33e80, aMimeType=
    0x7fffc9ef02b8 "application/x-shockwave-flash", aURI=0x7fffcdd55240)
    at /usr/src/debug/mozilla/layout/generic/nsObjectFrame.cpp:728
#3  0x00007ffff50e8c0f in Instantiate (aURI=0x7fffcdd55240, aMimeType=0x7fffc9ef02b8 "application/x-shockwave-flash", 
    this=0x7fffd96b6f48) at /usr/src/debug/mozilla/layout/generic/nsObjectFrame.cpp:2237
#4  nsObjectFrame::Instantiate (this=0x7fffd96b6f48, aMimeType=0x7fffc9ef02b8 "application/x-shockwave-flash", aURI=
    0x7fffcdd55240) at /usr/src/debug/mozilla/layout/generic/nsObjectFrame.cpp:2199
#5  0x00007ffff520ca7e in nsObjectLoadingContent::Instantiate (this=0x7fffcd38d410, aFrame=0x7fffd96b6f98, 
    aMIMEType=<optimized out>, aURI=0x7fffcdd55240)
    at /usr/src/debug/mozilla/content/base/src/nsObjectLoadingContent.cpp:1900
#6  0x00007ffff520ce2d in Run (this=0x7fffd14ecc80)
    at /usr/src/debug/mozilla/content/base/src/nsObjectLoadingContent.cpp:172
#7  nsAsyncInstantiateEvent::Run (this=0x7fffd14ecc80)
    at /usr/src/debug/mozilla/content/base/src/nsObjectLoadingContent.cpp:140
#8  0x00007ffff58dec20 in nsThread::ProcessNextEvent (this=0x7ffff6d1ab30, mayWait=false, result=0x7fffffffb1bf)
    at /usr/src/debug/mozilla/xpcom/threads/nsThread.cpp:631
#9  0x00007ffff58b3511 in NS_ProcessNextEvent_P (thread=<optimized out>, mayWait=false)
    at /usr/src/debug/obj/xpcom/build/nsThreadUtils.cpp:245
#10 0x00007ffff58552ba in mozilla::ipc::MessagePump::Run (this=0x7ffff6daa500, aDelegate=0x7ffff6de20b0)
    at /usr/src/debug/mozilla/ipc/glue/MessagePump.cpp:110
#11 0x00007ffff58fcabd in RunHandler (this=0x7ffff6de20b0)
    at /usr/src/debug/mozilla/ipc/chromium/src/base/message_loop.cc:201
#12 MessageLoop::Run (this=0x7ffff6de20b0) at /usr/src/debug/mozilla/ipc/chromium/src/base/message_loop.cc:175
#13 0x00007ffff57b7ce0 in nsBaseAppShell::Run (this=0x7fffe8743be0)
    at /usr/src/debug/mozilla/widget/src/xpwidgets/nsBaseAppShell.cpp:189
#14 0x00007ffff568ed22 in nsAppStartup::Run (this=0x7fffe87420b0)
    at /usr/src/debug/mozilla/toolkit/components/startup/nsAppStartup.cpp:228
#15 0x00007ffff4f29ffb in XRE_main (argc=<optimized out>, argv=<optimized out>, aAppData=<optimized out>)
    at /usr/src/debug/mozilla/toolkit/xre/nsAppRunner.cpp:3551
#16 0x0000000000402027 in do_main (argv=0x7fffffffdc98, argc=1, exePath=0x7fffffffbb88 "/usr/lib64/firefox/libxpcom.so")
    at /usr/src/debug/mozilla/browser/app/nsBrowserApp.cpp:198
#17 main (argc=<optimized out>, argv=<optimized out>) at /usr/src/debug/mozilla/browser/app/nsBrowserApp.cpp:281