873733 - crash in npjp2 @ mozilla::plugins::parent::_retainobject with Java SE7

Status: RESOLVED WONTFIX

(Core Graveyard :: Plug-ins, defect)

Description

[Scoobidiver (away)]

It's #79 crasher in 20.0.1 and #31 in the first days of 21.0 and 22.0b1.

Here are correlations per Java version from May 10:
    100% (15/15) vs.   2% (2503/136061) npjp2.dll
          7% (1/15) vs.   0% (574/136061) 10.17.2.2
         93% (14/15) vs.   1% (1594/136061) 10.21.2.11

Signature 	mozilla::plugins::parent::_retainobject(NPObject*) More Reports Search
UUID	3dc52bd7-8d0c-4e7a-9555-7e7bb2130518
Date Processed	2013-05-18 05:43:38
Uptime	641
Last Crash	8.2 weeks before submission
Install Age	10.7 minutes since version was first installed.
Install Time	2013-05-18 05:32:32
Product	Firefox
Version	22.0
Build ID	20130514181517
Release Channel	beta
OS	Windows NT
OS Version	6.1.7601 Service Pack 1
Build Architecture	x86
Build Architecture Info	GenuineIntel family 6 model 23 stepping 6
Crash Reason	EXCEPTION_ACCESS_VIOLATION_WRITE
Crash Address	0x1a7ae90
App Notes 	
AdapterVendorID: 0x8086, AdapterDeviceID: 0x29c2, AdapterSubsysID: 75281462, AdapterDriverVersion: 8.15.10.1930
D3D10 Layers? D3D10 Layers- D3D9 Layers? D3D9 Layers- 
Processor Notes 	sp-processor04_phx1_mozilla_com_22830:2012
EMCheckCompatibility	True
Adapter Vendor ID	0x8086
Adapter Device ID	0x29c2
Total Virtual Memory	2147352576
Available Virtual Memory	1665875968
System Memory Use Percentage	73
Available Page File	879091712
Available Physical Memory	285032448

Frame 	Module 	Signature 	Source
0 	xul.dll 	mozilla::plugins::parent::_retainobject 	dom/plugins/base/nsNPAPIPlugin.cpp:1416
1 	npjp2.dll 	npjp2.dll@0x37b4 	
2 	npjp2.dll 	npjp2.dll@0x444d 	
3 	npjp2.dll 	npjp2.dll@0x7dc6 	
4 	npjp2.dll 	npjp2.dll@0xfb2a 	
5 	npjp2.dll 	npjp2.dll@0x2d80 	

npjp2.dll 	10.21.2.11 	7B2EC43661A84375BD9E86E9C2CDC6F31 	npjp2.pdb

More reports at:
https://crash-stats.mozilla.com/report/list?signature=mozilla%3A%3Aplugins%3A%3Aparent%3A%3A_retainobject%28NPObject*%29

Comment 1

[Georg Fritzsche [:gfritzsche]]

Comments suggest that this may e.g. happen around/while/with a Java update notification coming up.
The stacks seem all to be truncated and only show npjp2.dll offset and the _retainobject, so we don't know where this comes from.

Thomas, do you think see anything actionable here?

Comment 2

[Thomas Ng]

Cannot tell much yet from information here - is there more stack trace or crash dump file that we can take a look at ?   Anyway will ask my team to look into it more.

The Java update comment was new though - we will try to play with that more and see if we can reproduce anything.

Please let us know if there is exact steps to reproduce the crash.  Thanks!

Comment 3

[Georg Fritzsche [:gfritzsche]]

At the moment we don't have more info - all the crash reports i peeked into have those truncated stacks.

Let's see if there is anything standing out via URLs.

Comment 4

[Mihai Morar, (:MihaiMorar)]

Here are a couple of steps found in comments via Soccoro:

1.Trying to close a box warning me to update adobe reader. Could not close thier box.
2.All I know is that I a Java update screen came up and I clicked on 'do it later'....
3.I was on a mybb site. Was trying to re-start Java for a game.

Comment 5

[Tracy Walker [:tracy]]

the top URLs from crash-stats:

Total Count 	URL
44 	http://java.com/en/download/
43 	https://www2.bancobrasil.com.br/aapf/login.jsp
41 	https://www.facebook.com/
30 	about:blank
25 	http://javadl.sun.com/webapps/download/AutoDL?BundleId=76902
15 	http://java.com/en/download
11 	https://www2.bancobrasil.com.br/aapf/login.jsp?aapf.IDH=sim&perfil=1
11 	about:home
8 	about:newtab
8 	http://java.com/en/download/windows_xpi.jsp?locale=en
8 	https://mail.google.com/mail/u/0/?shva=1#inbox
7 	https://www2.bancobrasil.com.br/aapf/login.jsp?flag=1
7 	http://www.facebook.com/
7 	https://www.zipformonline.com/zfov4/home.asp
4 	http://www.yahoo.com/
4 	http://www.youtube.com/
4 	http://www.seznam.cz/

Comment 6

[Mihai Morar, (:MihaiMorar)]

Not able to reproduce any crash using URLs from Comment 5 and information fron Comment 1. I tried with older version of Java, upgrading it to the latest version.

Also tried to uninstall curent Java and install then latest version. Same results. All exploratory and stress testing done following URL's from Comment 5 had no success.

Comment 7

[u279076]

This has spiked quite wildly starting yesterday in Firefox 25 Beta:

2013-10-16: 134.118
2013-10-15: 24.105 	
2013-10-14: 3.129
2013-10-13: 2.891
2013-10-12: 1.785
2013-10-11: 4.652
2013-10-10: 2.578
2013-10-09: 4.376 
2013-10-08: 4.371
2013-10-07: 3.294
2013-10-06: 4.283

The only change I'm aware of recently is that we pushed a CTP block for Java 7 yesterday. Is it possible that's causing this to spike? Mihai, could you please try to reproduce this with the latest Beta?

Comment 8

[Benjamin Smedberg]

This was caused by the new Java release which happened Tuesday. The blocks in bug 914690 should reduce the volume of this permanently.

Comment 9

[u279076]

Thanks Benjamin, I will monitor crashstats once we get that block pushed.

Comment 10

[u279076]

Current Rank:
 * Release: #15
 * Beta:    #19
 * Aurora:  #80
 * Nightly: #41
 * Explosiveness: N/A

Seems like this is dropping as it's no longer in the explosiveness report. I'll continue to monitor over the next couple of days.

Comment 11

[u279076]

This has dropped off significantly in the last few days.

Current Rank:
 * Firefox 24: #66
 * Firefox 25: #117
 * Firefox 26: #137
 * Firefox 27: #149

Comment 13

[Virtual_ManPL [:Virtual] 🇵🇱 - (please needinfo? me - so I will see your comment/reply/question/etc.)]

I'm marking this bug as WONTFIX per bug #1269807.

For more information see - https://blog.mozilla.org/futurereleases/2015/10/08/npapi-plugins-in-firefox/