Closed Bug 813637 Opened 12 years ago Closed 12 years ago

crash in mozilla::MediaPluginReader::MediaPluginReader when trying to download file

Categories

(Core :: Audio/Video, defect)

Product:
Core
Component:
Audio/Video
Version:
20 Branch
Platform:
ARM
Android
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla20
Tracking Flags:
Tracking Status
firefox20 --- fixed

People

(Reporter: aryx, Assigned: ehsan.akhgari)

References

Details

(4 keywords, Whiteboard: [native-crash])

Crash Data

Attachments

(1 file)

Patch (v1)
823 bytes, patch
cpearce
: review+
Details | Diff | Splinter Review 
This bug was filed from the Socorro interface and is 
report bp-6e4ee03f-8029-4f16-a167-e844f2121120 .
============================================================= 

Firefox for Android trunk nightly 20121120, Android 4.1.2 (stock), Google Nexus S

Steps to reproduce:
1. Open http://www.wrint.de/2012/11/14/schade/
2. The doorhanger for activating the plugins will popup. Tap on the content.
3. Click the 'Download' link.

Result: Crash in nsACString_internal::Assign https://crash-stats.mozilla.com/report/index/6e4ee03f-8029-4f16-a167-e844f2121120

Maybe related: bug 791654
It has been hit by four users in 20.0a1/20121120. The regression range is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=4fddb9923ef0&tochange=bc69705c162d
It's likely a regression from bug 812032.

More reports at:
https://crash-stats.mozilla.com/report/list?product=FennecAndroid&signature=nsACString_internal%3A%3AAssign%28char%20const*%2C%20unsigned%20int%2C%20mozilla%3A%3Afallible_t%20const%26%29
Blocks: 812032
Component: Plugins → Video/Audio
Keywords: regression, reproducible
Product: Firefox for Android → Core
Hardware: All → ARM
Whiteboard: [native-crash]
Version: Trunk → 20 Branch
Crash Signature: [@ nsACString_internal::Assign(char const*, unsigned int, mozilla::fallible_t const&)] → [@ nsACString_internal::Assign(char const*, unsigned int, mozilla::fallible_t const&)] [@ nsACString_internal::ReplacePrep(unsigned int, unsigned int, unsigned int)]
Summary: crash in nsACString_internal::Assign when trying to download file → crash in mozilla::MediaPluginReader::MediaPluginReader when trying to download file
Crash Signature: [@ nsACString_internal::Assign(char const*, unsigned int, mozilla::fallible_t const&)] [@ nsACString_internal::ReplacePrep(unsigned int, unsigned int, unsigned int)] → [@ nsACString_internal::Assign(char const*, unsigned int, mozilla::fallible_t const&)] [@ nsACString_internal::ReplacePrep(unsigned int, unsigned int, unsigned int)] [@ _MD_ATOMIC_ADD | nsACString_internal::Assign(nsACString_internal const& mozilla::fal…
It's #1 top crasher in 20.0a1.
tracking-fennec: --- → ?
Crash Signature: mozilla::fallible_t const&)] [@ _MD_ATOMIC_ADD | PR_AtomicIncrement | nsACString_internal::Assign(nsACString_internal const&, mozilla::fallible_t const&)] → mozilla::fallible_t const&)] [@ _MD_ATOMIC_ADD | PR_AtomicIncrement | nsACString_internal::Assign(nsACString_internal const&, mozilla::fallible_t const&)] [@ PR_Calloc | nsACString_internal::Assign(nsACString_internal const& mozilla::fallible_t const&)]
tracking-firefox20: --- → ?
Keywords: topcrash
Despite my best efforts, I have not yet been able to debug on mobile.  kats promised me to lend me his machine some time so that I can debug this...
Assignee: nobody → ehsan
Attached patch Patch (v1) — — Splinter Review 
Turns out that the compiler is well capable of figuring out how the type system works.  ;-)
Attachment #684212 - Flags: review?(cpearce)
Attachment #684212 - Flags: review?(cpearce) → review+
https://hg.mozilla.org/mozilla-central/rev/d6f7194f530f
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla20
Depends on: 815226
tracking-fennec: ? → ---
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: