790537 - crash in nsPluginStreamListenerPeer::SetUpStreamListener

Status: RESOLVED INCOMPLETE

(Core Graveyard :: Plug-ins, defect)

Description

[Scoobidiver (away)]

It's #293 top browser crasher in 17.0a2 and #36 in 18.0a1.

It first appeared in 17.0a1/20120809. The regression range might be (discontinuous across builds):
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=e55638d4037a&tochange=3199bc043da4

Signature 	nsPluginStreamListenerPeer::SetUpStreamListener(nsIRequest*, nsIURI*) More Reports Search
UUID	0c37ddbd-6a6f-472a-98a0-a53eb2120911
Date Processed	2012-09-11 22:41:17
Uptime	78
Install Age	1.2 hours since version was first installed.
Install Time	2012-09-11 21:28:23
Product	Firefox
Version	18.0a1
Build ID	20120911030553
Release Channel	nightly
OS	Windows NT
OS Version	6.2.9200
Build Architecture	x86
Build Architecture Info	GenuineIntel family 6 model 42 stepping 7
Crash Reason	EXCEPTION_ACCESS_VIOLATION_EXEC
Crash Address	0x640065
App Notes 	
AdapterVendorID: 0x10de, AdapterDeviceID: 0x0de5, AdapterSubsysID: 00000000, AdapterDriverVersion: 9.18.13.282
D2D? D2D+ DWrite? DWrite+ D3D10 Layers? D3D10 Layers+ 
EMCheckCompatibility	True
Adapter Vendor ID	0x10de
Adapter Device ID	0x0de5
Total Virtual Memory	4294836224
Available Virtual Memory	3794104320
System Memory Use Percentage	16
Available Page File	8247623680
Available Physical Memory	7114756096

Frame 	Module 	Signature 	Source
0 		@0x640065 	
1 	xul.dll 	nsPluginStreamListenerPeer::SetUpStreamListener 	dom/plugins/base/nsPluginStreamListenerPeer.cpp:1104
2 	xul.dll 	nsPluginStreamListenerPeer::OnStartRequest 	dom/plugins/base/nsPluginStreamListenerPeer.cpp:616
3 	xul.dll 	nsObjectLoadingContent::LoadObject 	content/base/src/nsObjectLoadingContent.cpp:1741
4 	xul.dll 	nsObjectLoadingContent::OnStartRequest 	content/base/src/nsObjectLoadingContent.cpp:847
5 	xul.dll 	mozilla::net::nsHttpChannel::CallOnStartRequest 	netwerk/protocol/http/nsHttpChannel.cpp:969
6 	xul.dll 	mozilla::net::nsHttpChannel::InitCacheEntry 	netwerk/protocol/http/nsHttpChannel.cpp:3635
7 	nspr4.dll 	PR_GetHostByAddr 	nsprpub/pr/src/misc/prnetdb.c:1139
8 	xul.dll 	nsCookieService::SetCookieStringCommon 	netwerk/cookie/nsCookieService.cpp:1468
9 	mozglue.dll 	je_free 	memory/mozjemalloc/jemalloc.c:6575
10 	xul.dll 	nsHttpChannelAuthProvider::`vector deleting destructor' 	
11 	xul.dll 	nsHttpChannelAuthProvider::Release 	netwerk/protocol/http/nsHttpChannelAuthProvider.cpp:1408
12 	xul.dll 	nsCOMPtr_base::assign_assuming_AddRef 	obj-firefox/dist/include/nsCOMPtr.h:440
13 	xul.dll 	mozilla::net::nsHttpChannel::ProcessResponse 	netwerk/protocol/http/nsHttpChannel.cpp:1233
14 	xul.dll 	mozilla::net::nsHttpChannel::OnStartRequest 	netwerk/protocol/http/nsHttpChannel.cpp:4790
15 	xul.dll 	nsInputStreamPump::OnStateStart 	netwerk/base/src/nsInputStreamPump.cpp:417
16 	xul.dll 	nsInputStreamPump::OnInputStreamReady 	netwerk/base/src/nsInputStreamPump.cpp:368
17 	xul.dll 	nsInputStreamReadyEvent::Run 	xpcom/io/nsStreamUtils.cpp:82
18 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:624
19 	xul.dll 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:82
20 	xul.dll 	MessageLoop::RunHandler 	ipc/chromium/src/base/message_loop.cc:201
21 	xul.dll 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:175
22 	xul.dll 	nsBaseAppShell::Run 	widget/xpwidgets/nsBaseAppShell.cpp:163
23 	xul.dll 	nsAppShell::Run 	widget/windows/nsAppShell.cpp:232
24 	xul.dll 	nsAppStartup::Run 	toolkit/components/startup/nsAppStartup.cpp:273
25 	xul.dll 	XREMain::XRE_mainRun 	toolkit/xre/nsAppRunner.cpp:3835
26 	xul.dll 	XREMain::XRE_main 	toolkit/xre/nsAppRunner.cpp:3912
27 	xul.dll 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3988
28 	firefox.exe 	wmain 	toolkit/xre/nsWindowsWMain.cpp:100

More reports at:
https://crash-stats.mozilla.com/report/list?signature=nsPluginStreamListenerPeer%3A%3ASetUpStreamListener%28nsIRequest*%2C+nsIURI*%29

Comment 1

[Josh Aas]

Do you think this is related to your nsObjectLoadingContent work, John?

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'nsPluginStreamListenerPeer::SetUpStreamListener':
 - nightly(version 50):3 crashes from 2016-06-06.
 - aurora (version 49):7 crashes from 2016-06-07.
 - beta   (version 48):200 crashes from 2016-06-06.
 - release(version 47):2703 crashes from 2016-05-31.
 - esr    (version 45):334 crashes from 2016-04-07.

Crash volume on the last weeks:
            W. N-1  W. N-2  W. N-3  W. N-4  W. N-5  W. N-6  W. N-7
 - nightly       0       1       1       0       0       0       0
 - aurora        2       0       3       0       0       1       1
 - beta         32      29      24      23      33      16      31
 - release     425     407     388     334     341     293     369
 - esr          41      46      45      34      35      30      28

Affected platforms: Windows, Mac OS X, Linux

Comment 3

[Liz Henry (:lizzard) (relman/hg->git project)]

Too late for beta, we could still take a patch in aurora 50.

Comment 4

[Jim Mathies [:jimm]]

I don't have anyone with cycles for this currently.

Comment 5

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'nsPluginStreamListenerPeer::SetUpStreamListener':
 - nightly (version 52): 0 crashes from 2016-09-19.
 - aurora  (version 51): 1 crash from 2016-09-19.
 - beta    (version 50): 27 crashes from 2016-09-20.
 - release (version 49): 512 crashes from 2016-09-05.
 - esr     (version 45): 430 crashes from 2016-07-25.

Crash volume on the last weeks (Week N is from 10-17 to 10-23):
            W. N-1  W. N-2  W. N-3  W. N-4
 - nightly       0       0       0       0
 - aurora        0       1       0       0
 - beta          8       6       8       5
 - release     136     150     150      28
 - esr          37      31      43      38

Affected platforms: Windows, Mac OS X, Linux

Crash rank on the last 7 days:
           Browser   Content     Plugin
 - nightly
 - aurora
 - beta    #2019
 - release #389      #4206
 - esr     #230

Comment 6

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'nsPluginStreamListenerPeer::SetUpStreamListener':
 - nightly (version 54): 0 crashes from 2017-01-23.
 - aurora  (version 53): 0 crashes from 2017-01-23.
 - beta    (version 52): 18 crashes from 2017-01-23.
 - release (version 51): 43 crashes from 2017-01-16.
 - esr     (version 45): 908 crashes from 2016-08-03.

Crash volume on the last weeks (Week N is from 01-30 to 02-05):
            W. N-1  W. N-2  W. N-3  W. N-4  W. N-5  W. N-6  W. N-7
 - nightly       0
 - aurora        0
 - beta          8
 - release      22       0
 - esr          19      36      35      28      15      20      44

Affected platforms: Windows, Mac OS X

Crash rank on the last 7 days:
           Browser   Content   Plugin
 - nightly
 - aurora
 - beta    #482
 - release #550      #2370
 - esr     #291

Comment 7

[Ryan VanderMeulen [:RyanVM]]

Crashes don't appear to show up until we hit Beta in the cycle, for whatever that's worth.

Comment 8

[Liz Henry (:lizzard) (relman/hg->git project)]

Fairly low frequency crash, unlikely we will fix this for 52 but we could still take a patch in 53/54.

Comment 9

[Benjamin Smedberg]

Resolving old bugs which are likely not relevant any more, since NPAPI plugins are deprecated.