773173 - startup crash in `anonymous namespace'::getFullPath @ _SEH_prolog4 with Bkav IS 3.0.0.38

Status: REOPENED

(External Software Affecting Firefox :: Other, defect)

Description

[Scoobidiver (away)]

There are startup crashes in Nightly, Aurora, Beta and Release from July 11, probably coincident with the release of a new version of Bkav antivirus.

Signature 	_SEH_prolog4 More Reports Search
UUID	80b1c3b7-f1a2-4f6d-bf3d-bfad62120712
Date Processed	2012-07-12 08:24:16
Uptime	3
Last Crash	31.2 minutes before submission
Install Age	3 seconds since version was first installed.
Install Time	2012-07-12 08:20:28
Product	Firefox
Version	16.0a1
Build ID	20120711030538
Release Channel	nightly
OS	Windows NT
OS Version	6.1.7601 Service Pack 1
Build Architecture	x86
Build Architecture Info	GenuineIntel family 6 model 23 stepping 10
Crash Reason	EXCEPTION_STACK_OVERFLOW
Crash Address	0x77392bb6
Processor Notes 	WARNING: JSON file missing Add-ons; This dump is too long and has triggered the automatic truncation routine
EMCheckCompatibility	False	
Total Virtual Memory	2147352576
Available Virtual Memory	2005241856
System Memory Use Percentage	56
Available Page File	913055744
Available Physical Memory	932360192

Frame 	Module 	Signature 	Source
0 	ntdll.dll 	_SEH_prolog4 	
1 	ntdll.dll 	RtlAllocateHeap 	
2 	ntdll.dll 	RtlpDosPathNameToRelativeNtPathName_Ustr 	
3 	ntdll.dll 	RtlDosPathNameToRelativeNtPathName_Ustr 	
4 	ntdll.dll 	RtlDoesFileExists_UstrEx 	
5 	ntdll.dll 	RtlDoesFileExists_UEx 	
6 	ntdll.dll 	RtlULongMult 	
7 	KERNELBASE.dll 	SearchPathW 	
8 	xul.dll 	`anonymous namespace'::getFullPath 	toolkit/xre/nsWindowsDllBlocklist.cpp:270
9 	xul.dll 	`anonymous namespace'::patched_LdrLoadDll 	toolkit/xre/nsWindowsDllBlocklist.cpp:426
10 	KERNELBASE.dll 	FreeLibrary 	
11 	kernel32.dll 	LoadLibraryW 	
12 	BkavFirewallEngine.dll 	BkavFirewallEngine.dll@0xfed3 	
13 	xul.dll 	`anonymous namespace'::patched_LdrLoadDll 	toolkit/xre/nsWindowsDllBlocklist.cpp:433
14 	KERNELBASE.dll 	FreeLibrary 
...

More reports at:
https://crash-stats.mozilla.com/report/list?signature=_SEH_prolog4

Comment 1

[Scoobidiver (away)]

More reports also at:
https://crash-stats.mozilla.com/report/list?signature=RtlpDosPathNameToRelativeNtPathName_Ustr+|+RtlDosPathNameToRelativeNtPathName_Ustr+|+RtlDoesFileExists_UstrEx+|+RtlDoesFileExists_UEx+|+NtdllDispatchHook_W

Comment 2

[Robert Kaiser]

This seems to be the same: https://crash-stats.mozilla.com/report/list?signature=RtlAllocateHeap%20%7C%20RtlpDosPathNameToRelativeNtPathName_Ustr%20%7C%20RtlDosPathNameToRelativeNtPathName_Ustr%20%7C%20RtlDoesFileExists_UstrEx%20%7C%20RtlDoesFileExists_UEx%20%7C%20NtdllDispatchHook_W

At least it also appeared on 2012-07-11 first and on both 13 and 14, which matches the profile of the comment #1 signature exactly.

Comment 3

[Robert Kaiser]

Marcia, those are low volume right now, but we should monitor if those rise further and if they do, start outreach or other actions.

Comment 4

[Scoobidiver (away)]

The issue caused by a Bkav update is confirmed with this comment: "After updating Bkav antivirus software, I can't run firefox. Then I uninstall and install firefox 13 again but it is not working".

Their English forum is down, so they can be contacted only on the Vietnamese forum: http://forum.bkav.com.vn/

Comment 6

[Marcia Knous [:marcia]]

Carrying over tracking nom from duped bug. As Alex says we will watch this one.

Comment 7

[Alex Keybl [:akeybl]]

http://www.bkav.com.vn/download-bkav-home & qawanted

Based upon the lack of testing so far, the fact that this affects multiple versions, and the fact a blocklist addition would take some time, let's go to build with 14.0.1 now.

Comment 8

[Jorge Villalobos [:jorgev] (he/him)]

I sent a message to their contact email address.

Comment 9

[Jorge Villalobos [:jorgev] (he/him)]

Never mind, both addressed bounced :|

Comment 10

[juan becerra [:juanb]]

I have been trying to reproduce this problem using Fx14.0.1 and the latest versions of BkavPro and BkavHome. These come with a Bkav Site Advisor extension and plugin in Firefox. I haven't been able to find Bkav antivirus version 3.0.0.38.

I have fiddled with the Firewall settings on the program, restarted the machine, I've done some general browsing, looked for some popular Vietnamese sites, and so on.

I've also tried to upgrade the software, but I need a full paid license to upgrade the antivirus database. 

The program has an option to use the English interface, so once you download it, it should be no problem.

I'll try a few other things.

Comment 11

[Scoobidiver (away)]

It's a pure startup crash (uptime < 7 sec) so there are no STR to find.
BkavFirewallEngine.dll is the DLL with version 3.0.0.38.

Comment 12

[Marcia Knous [:marcia]]

Once I installed BkavPro it prompted me to update my virus engine but it said I had to have a paid version to do that.

Bkav SiteAdvisor 1.0 gets installed into addons on my machine, but I don't see BkavFirewallEngine.dll when I do a search on the machine.

Comment 13

[Scoobidiver (away)]

(In reply to Marcia Knous [:marcia] from comment #12)
> but I don't see BkavFirewallEngine.dll when I do a search on the machine.
It might be part of the security suite, Bkav IS, not antivirus software, Bkav FE.

Comment 14

[Alex Keybl [:akeybl]]

This is actually a pretty low volume crasher from our read (not on the top crash list) - we've got bigger fish to fry right now. Untracking for 14/15.

Comment 15

[Ioana (away)]

Removing keyword since qa couldn't reproduce this crash.

According to Socorro, current versions are still affected, but the volume is quite very low:
https://crash-stats.mozilla.com/report/list?signature=_SEH_prolog4&product=Firefox&query_type=contains&range_unit=weeks&process_type=any&hang_type=any&date=2014-01-15+14%3A00%3A00&range_value=4#reports
https://crash-stats.mozilla.com/query/?product=Firefox&version=ALL%3AALL&range_value=4&range_unit=weeks&date=01%2F15%2F2014+14%3A00%3A00&query_search=signature&query_type=contains&query=RtlpDosPathNameToRelativeNtPathName_Ustr+%7C+RtlDosPathNameToRelativeNtPathName_Ustr+%7C+RtlDoesFileExists_UstrEx+%7C+RtlDoesFileExists_UEx+%7C+NtdllDispatchHook_W&reason=&release_channels=&build_id=&process_type=any&hang_type=any
https://crash-stats.mozilla.com/query/?product=Firefox&version=ALL%3AALL&range_value=4&range_unit=weeks&date=01%2F15%2F2014+14%3A00%3A00&query_search=signature&query_type=contains&query=RtlAllocateHeap+%7C+RtlpDosPathNameToRelativeNtPathName_Ustr+%7C+RtlDosPathNameToRelativeNtPathName_Ustr+%7C+RtlDoesFileExists_UstrEx+%7C+RtlDoesFileExists_UEx+%7C+NtdllDispatchHook_W&reason=&release_channels=&build_id=&process_type=any&hang_type=any

Comment 16

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.

Comment 17

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.

Comment 18

[Calixte Denizet (:calixte)]

There are still some crashes so reopen it.

Comment 19

[BugBot [:suhaib / :marco/ :calixte]]

Since the crash volume is low (less than 5 per week), the severity is downgraded to S3. Feel free to change it back if you think the bug is still critical.

For more information, please visit auto_nag documentation.