Closed Bug 787685 Opened 12 years ago Closed 8 years ago

crash in nsPluginInstanceOwner::~nsPluginInstanceOwner on Honeycomb and above

Categories

(Core Graveyard :: Plug-ins, defect)

Product:
Core Graveyard
Component:
Plug-ins
Version:
15 Branch
Platform:
ARM
Android
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(firefox19 affected, firefox20 affected, firefox21 affected, firefox22 affected, firefox23 affected, firefox24 affected, firefox25 affected, firefox26 affected)

Status:
RESOLVED INCOMPLETE
Tracking Flags:
Tracking Status
firefox19 --- affected
firefox20 --- affected
firefox21 --- affected
firefox22 --- affected
firefox23 --- affected
firefox24 --- affected
firefox25 --- affected
firefox26 --- affected

People

(Reporter: scoobidiver, Unassigned)

References

Details

(Keywords: crash, regression, Whiteboard: [native-crash])

Crash Data

It first appeared in 15.0b2 and is likely a regression from bug 687267. It's #136 top crasher in 15.0, #16 in 16.0b1, #46 in 17.0a2, and #78 in 18.0a1. Signature @0x0 | nsPluginInstanceOwner::~nsPluginInstanceOwner More Reports Search UUID 50d6ec23-c689-4ed3-8216-617262120831 Date Processed 2012-08-31 20:39:17 Uptime 162 Last Crash 6.9 minutes before submission Install Age 8.2 hours since version was first installed. Install Time 2012-08-31 12:29:03 Product FennecAndroid Version 18.0a1 Build ID 20120831030612 Release Channel nightly OS Linux OS Version 0.0.0 Linux 2.6.39.4+ #1 SMP PREEMPT Thu Mar 29 23:01:48 CST 2012 armv7l Build Architecture arm Build Architecture Info Crash Reason SIGSEGV Crash Address 0x0 App Notes AdapterDescription: 'NVIDIA Corporation -- NVIDIA Tegra -- OpenGL ES 2.0 14.01002 -- Model: A500, Product: a500_ww_gen1, Manufacturer: Acer, Hardware: picasso' EGL? EGL+ GL Context? GL Context+ GL Layers? GL Layers+ Acer A500 acer/a500_ww_gen1/picasso:4.0.3/IML74K/1333032611:user/release-keys EMCheckCompatibility True Adapter Vendor ID NVIDIA Corporation Adapter Device ID NVIDIA Tegra Frame Module Signature Source 0 @0x0 1 libxul.so nsPluginInstanceOwner::~nsPluginInstanceOwner nsPluginInstanceOwner.cpp:350 2 libxul.so nsPluginInstanceOwner::~nsPluginInstanceOwner nsPluginInstanceOwner.cpp:397 3 libxul.so nsPluginInstanceOwner::Release nsPluginInstanceOwner.cpp:399 4 libxul.so nsEventListenerInfo::~nsEventListenerInfo nsAutoPtr.h:874 5 libxul.so nsEventListenerInfo::~nsEventListenerInfo nsEventListenerService.h:27 6 libxul.so nsEventListenerInfo::Release nsEventListenerService.cpp:36 7 libxul.so XPCIncrementalReleaseRunnable::ReleaseNow XPCJSRuntime.cpp:613 8 libxul.so XPCIncrementalReleaseRunnable::Run XPCJSRuntime.cpp:643 9 libxul.so nsThread::ProcessNextEvent nsThread.cpp:624 10 libxul.so NS_ProcessNextEvent_P nsThreadUtils.cpp:220 11 libxul.so mozilla::ipc::MessagePump::Run MessagePump.cpp:82 12 libxul.so MessageLoop::RunInternal message_loop.cc:208 13 libxul.so MessageLoop::Run message_loop.cc:201 14 libxul.so nsBaseAppShell::Run nsBaseAppShell.cpp:163 15 libxul.so nsAppStartup::Run nsAppStartup.cpp:273 16 libxul.so XREMain::XRE_mainRun nsAppRunner.cpp:3835 17 libxul.so XREMain::XRE_main nsAppRunner.cpp:3912 18 libxul.so XRE_main nsAppRunner.cpp:3988 ... More reports at: https://crash-stats.mozilla.com/report/list?signature=%400x0+|+nsPluginInstanceOwner%3A%3A~nsPluginInstanceOwner https://crash-stats.mozilla.com/report/list?signature=nsPluginInstanceOwner%3A%3A~nsPluginInstanceOwner
Crash Signature: [@ nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ @0x0 | nsPluginInstanceOwner::~nsPluginInstanceOwner] → [@ nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ @0x0 | nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ AsyncPaintWaitEvent::AsyncPaintWaitEvent]
With combined signatures, it's #5 top crasher in 16.0.1 and #14 in 17.0b2.
Keywords: topcrash
It's only #15 top crasher in 17.0.
Keywords: topcrash
With combined signatures, it's #11 top crasher in 17.0 and #6 in 18.0b7.
Keywords: topcrash
Looks like it happens a lot on the Nexus 7 on 4.2.1 #16 on release, #14 on beta as of today.
Crash Signature: [@ nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ @0x0 | nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ AsyncPaintWaitEvent::AsyncPaintWaitEvent] → [@ nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ @0x0 | nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ AsyncPaintWaitEvent::AsyncPaintWaitEvent] [@ libstdc++.so@0xa01 ]
Crash Signature: [@ nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ @0x0 | nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ AsyncPaintWaitEvent::AsyncPaintWaitEvent] [@ libstdc++.so@0xa01 ] → [@ nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ @0x0 | nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ AsyncPaintWaitEvent::AsyncPaintWaitEvent] [@ libstdc++.so@0xa01] [@ libstdc++.so@0xa3e ] [@ libstdc++.so@0xa13 ]
status-firefox19: --- → affected
status-firefox20: --- → affected
status-firefox21: --- → affected
status-firefox22: --- → affected
With combined signatures, it's #13 top crasher in 19.0.2, so not enough to qualify it for the topcrash keyword according to https://wiki.mozilla.org/CrashKill/Topcrash
Keywords: topcrash
Crash Signature: [@ nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ @0x0 | nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ AsyncPaintWaitEvent::AsyncPaintWaitEvent] [@ libstdc++.so@0xa01] [@ libstdc++.so@0xa3e ] [@ libstdc++.so@0xa13 ] → [@ nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ @0x0 | nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ AsyncPaintWaitEvent::AsyncPaintWaitEvent] [@ __cxa_pure_virtual ] [@ libstdc++.so@0xa01] [@ libstdc++.so@0xa3e ] [@ libstdc++.so@0xa13 ]
Crash Signature: [@ nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ @0x0 | nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ AsyncPaintWaitEvent::AsyncPaintWaitEvent] [@ __cxa_pure_virtual ] [@ libstdc++.so@0xa01] [@ libstdc++.so@0xa3e ] [@ libstdc++.so@0xa13 ] → [@ nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ @0x0 | nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ AsyncPaintWaitEvent::AsyncPaintWaitEvent] [@ __cxa_pure_virtual ] [@ _thread_created_hook ] [@ libstdc++.so@0xa01] [@ libstdc++.so@0xa3e ]…
status-firefox23: --- → affected
With combined signatures, it's #14 top crasher in 20.0.1, #8 in 21.0b6, #46 in 22.0a2, and #35 in 23.0a1.
Keywords: topcrash
status-firefox24: --- → affected
It's #14 crasher in 21.0 and #17 in 22.0b1.
Keywords: topcrash
Crash Signature: [@ nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ @0x0 | nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ AsyncPaintWaitEvent::AsyncPaintWaitEvent] [@ __cxa_pure_virtual ] [@ _thread_created_hook ] [@ libstdc++.so@0xa01] [@ libstdc++.so@0xa3e ]… → [@ nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ @0x0 | nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ AsyncPaintWaitEvent::AsyncPaintWaitEvent] [@ AsyncPaintWaitEvent::AsyncPaintWaitEvent(nsIContent*, bool) ] [@ __cxa_pure_virtual ] [@ _thre…
Crash Signature: [@ nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ @0x0 | nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ AsyncPaintWaitEvent::AsyncPaintWaitEvent] [@ AsyncPaintWaitEvent::AsyncPaintWaitEvent(nsIContent*, bool) ] [@ __cxa_pure_virtual ] [@ _thre… → [@ nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ @0x0 | nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ nsPluginInstanceOwner::~nsPluginInstanceOwner() ] [@ AsyncPaintWaitEvent::AsyncPaintWaitEvent] [@ AsyncPaintWaitEvent::AsyncPaintWaitEvent(ns…
status-firefox25: --- → affected
status-firefox26: --- → affected
Crash Signature: [@ nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ @0x0 | nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ nsPluginInstanceOwner::~nsPluginInstanceOwner() ] [@ AsyncPaintWaitEvent::AsyncPaintWaitEvent] [@ AsyncPaintWaitEvent::AsyncPaintWaitEvent(ns… → [@ nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ @0x0 | nsPluginInstanceOwner::~nsPluginInstanceOwner] [@ nsPluginInstanceOwner::~nsPluginInstanceOwner() ] [@ @0x0 | nsPluginInstanceOwner::~nsPluginInstanceOwner() ] [@ AsyncPaintWaitEvent::AsyncPa…
Resolving old bugs which are likely not relevant any more, since NPAPI plugins are deprecated.
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → INCOMPLETE
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.