Closed Bug 418811 Opened 17 years ago Closed 17 years ago

Firefox hang (in Flash plugin?)

Categories

(Core :: General, defect)

Product:
Core
Component:
General
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED INCOMPLETE

People

(Reporter: ted, Unassigned)

Details

(Keywords: hang, regression) 

My browser was hung, so I attached WinDBG and did "!analyze -v -hung":

*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************


FAULTING_IP: 
ntdll!DbgBreakPoint+0
7c901230 cc              int     3

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 7c901230 (ntdll!DbgBreakPoint)
   ExceptionCode: 80000003 (Break instruction exception)
  ExceptionFlags: 00000000
NumberParameters: 3
   Parameter[0]: 00000000
   Parameter[1]: 00000002
   Parameter[2]: 00000003

FAULTING_THREAD:  00000228

BUGCHECK_STR:  HANG

PROCESS_NAME:  firefox.exe

ERROR_CODE: (NTSTATUS) 0xcfffffff - <Unable to get error code text>

NTGLOBALFLAG:  0

APPLICATION_VERIFIER_FLAGS:  0

DERIVED_WAIT_CHAIN:  

Dl Eid Cid     WaitType
-- --- ------- --------------------------
   15  e50.228 Network                

WAIT_CHAIN_COMMAND:  ~15s;k;;

BLOCKING_THREAD:  00000228

DEFAULT_BUCKET_ID:  APPLICATION_HANG_BlockedOn_NetworkCall

PRIMARY_PROBLEM_CLASS:  APPLICATION_HANG_BlockedOn_NetworkCall

LAST_CONTROL_TRANSFER:  from 7c90e9c0 to 7c90eb94

STACK_TEXT:  
0a1ff7e8 7c90e9c0 71a54033 000007b8 00000001 ntdll!KiFastSystemCallRet
0a1ff7ec 71a54033 000007b8 00000001 0a1ff814 ntdll!ZwWaitForSingleObject+0xc
0a1ff828 71a557c9 000007b8 000007ec 00000000 mswsock!SockWaitForSingleObject+0x1a0
0a1ff8a0 71ab4379 000007ec 0a1ff900 00000001 mswsock!WSPRecv+0x1dd
0a1ff8dc 71ad2ea3 000007ec 0a1ff900 00000001 WS2_32!WSARecv+0x77
0a1ff908 771c6643 000007ec 00000000 00000400 WSOCK32!recv+0x33
0a1ff934 771c65ac 00000000 01a7a278 01a57068 WININET!ICSocket::Receive_Continue+0x87
0a1ff94c 771c654c 01a7a278 0a1ff970 771bcaf4 WININET!ICSocket::Receive_Start+0xbb
0a1ff958 771bcaf4 01a7a278 00000000 00000000 WININET!CFsm_SocketReceive::RunSM+0x3b
0a1ff970 771bcaa2 01a532d8 00000000 00000000 WININET!CFsm::Run+0x39
0a1ff988 771c644e 01a7a278 01a513f0 0a1ff9e8 WININET!DoFsm+0x25
0a1ff998 7720083d 01a51478 01a5147c 01a51480 WININET!ICSocket::Receive+0x3e
0a1ff9e8 77200bfe 00000000 0a1ffa0c 771bcaf4 WININET!ICSecureSocket::NegotiateLoop_Fsm+0x1d4
0a1ff9f4 771bcaf4 01a513f0 01a57068 00000000 WININET!CFsm_NegotiateLoop::RunSM+0x2e
0a1ffa0c 771bcaa2 01a532d8 00000000 00000000 WININET!CFsm::Run+0x39
0a1ffa24 77200d4f 01a513f0 01a6d3e0 0a1ffa74 WININET!DoFsm+0x25
0a1ffa34 77201445 00000000 00000220 01a126d8 WININET!ICSecureSocket::SSPINegotiateLoop+0x3b
0a1ffa74 772015b9 00000000 0a1ffa98 771bcaf4 WININET!ICSecureSocket::SecureNegotiate_Fsm+0x2b6
0a1ffa80 771bcaf4 01a6d3e0 01a79be0 00000000 WININET!CFsm_SecureNegotiate::RunSM+0x2e
0a1ffa98 771bcaa2 01a532d8 00000000 00000000 WININET!CFsm::Run+0x39
0a1ffab0 772016e1 01a6d3e0 01a57068 0a1ffb00 WININET!DoFsm+0x25
0a1ffac0 772017c6 00000220 01a56e30 01a532d8 WININET!ICSecureSocket::NegotiateSecConnection+0x2f
0a1ffb00 7720193d 00000000 0a1ffb24 771bcaf4 WININET!ICSecureSocket::SecureHandshake_Fsm+0xdb
0a1ffb0c 771bcaf4 01a79be0 00000000 00000000 WININET!CFsm_SecureHandshake::RunSM+0x2e
0a1ffb24 771bcaa2 01a532d8 00000000 00000000 WININET!CFsm::Run+0x39
0a1ffb3c 772019ab 01a79be0 01a56db0 0a1ffb68 WININET!DoFsm+0x25
0a1ffb4c 77201a1c 00000220 01a56e30 01a532d8 WININET!ICSecureSocket::SecureHandshakeWithServer+0x2c
0a1ffb68 77201aa5 01a56db0 0a1ffb8c 771bcaf4 WININET!ICSecureSocket::Connect_Fsm+0x67
0a1ffb74 771bcaf4 01a56db0 0018ac78 00000000 WININET!CFsm_SecureConnect::RunSM+0x2e
0a1ffb8c 771bcaa2 01a532d8 00000000 00000000 WININET!CFsm::Run+0x39
0a1ffba4 77201b26 01a56db0 01a56548 0a1ffbf4 WININET!DoFsm+0x25
0a1ffbb4 771bd6ce 000493e0 00000005 00000220 WININET!ICSecureSocket::Connect+0x32
0a1ffbf4 771bd493 0018ac78 0a1ffc18 771bcaf4 WININET!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection_Fsm+0x391
0a1ffc00 771bcaf4 0018ac78 00000000 00000000 WININET!CFsm_OpenConnection::RunSM+0x33
0a1ffc18 771bcaa2 01a532d8 00000000 00000000 WININET!CFsm::Run+0x39
0a1ffc30 771bd9cc 0018ac78 01a56548 0a1ffc68 WININET!DoFsm+0x25
0a1ffc40 771bd964 00000000 00000000 01a532d8 WININET!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection+0x2f
0a1ffc68 771bd8dd 0015faa0 0a1ffc8c 771bcaf4 WININET!HTTP_REQUEST_HANDLE_OBJECT::MakeConnection_Fsm+0x87
0a1ffc74 771bcaf4 0015faa0 01a56548 00000000 WININET!CFsm_MakeConnection::RunSM+0x2e
0a1ffc8c 771bcaa2 01a532d8 00000000 00000000 WININET!CFsm::Run+0x39
0a1ffca4 771bd7a2 0015faa0 01a532d8 01a56ef0 WININET!DoFsm+0x25
0a1ffce8 771bd719 01a56ef0 0a1ffd0c 771bcaf4 WININET!HTTP_REQUEST_HANDLE_OBJECT::SendRequest_Fsm+0x9b
0a1ffcf4 771bcaf4 01a56ef0 01a56548 00000000 WININET!CFsm_SendRequest::RunSM+0x2e
0a1ffd0c 771bcaa2 01a532d8 00000000 00000000 WININET!CFsm::Run+0x39
0a1ffd24 771bcece 01a56ef0 01a56548 01a58288 WININET!DoFsm+0x25
0a1ffd40 771bcbfd 00000001 01a532d8 01a58288 WININET!HTTP_REQUEST_HANDLE_OBJECT::HttpSendRequest_Start+0x450
0a1ffd54 771bcaf4 01a58288 00000000 00000000 WININET!CFsm_HttpSendRequest::RunSM+0x59
0a1ffd6c 771bcaa2 01a532d8 00000000 00000000 WININET!CFsm::Run+0x39
0a1ffd84 771bcd17 01a58288 0c11c560 00000003 WININET!DoFsm+0x25
0a1ffdac 771c6146 00000000 00000000 00000000 WININET!HttpWrapSendRequest+0x127
0a1ffdd0 300df405 00cc0018 00000000 00000000 WININET!HttpSendRequestA+0x1d
WARNING: Stack unwind information not available. Following frames may be wrong.
0a1ffdf8 300c8951 0c81d560 3019b938 000001bb NPSWF32!native_ShockwaveFlash_TCallLabel+0x3623f
0a1ffe4c 300c8e01 0c81d560 000001bb 00000001 NPSWF32!native_ShockwaveFlash_TCallLabel+0x1f78b
0a1ffe78 300c8ee6 0c81d560 000001bb 00000004 NPSWF32!native_ShockwaveFlash_TCallLabel+0x1fc3b
0a1ffeac 300c90aa 0c81d560 000001bb 000001bb NPSWF32!native_ShockwaveFlash_TCallLabel+0x1fd20
0a1fff78 300c9434 0c81d560 000001bb 00000004 NPSWF32!native_ShockwaveFlash_TCallLabel+0x1fee4
00000000 00000000 00000000 00000000 00000000 NPSWF32!native_ShockwaveFlash_TCallLabel+0x2026e


FOLLOWUP_IP: 
NPSWF32!native_ShockwaveFlash_TCallLabel+3623f
300df405 85c0            test    eax,eax

SYMBOL_STACK_INDEX:  33

SYMBOL_NAME:  NPSWF32!native_ShockwaveFlash_TCallLabel+3623f

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: NPSWF32

IMAGE_NAME:  NPSWF32.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  466db1d1

STACK_COMMAND:  ~15s ; kb

FAILURE_BUCKET_ID:  HANG_NPSWF32!native_ShockwaveFlash_TCallLabel+3623f

BUCKET_ID:  HANG_NPSWF32!native_ShockwaveFlash_TCallLabel+3623f

Followup: MachineOwner
---------

Looks like Flash is blocked on a network call, I'm not sure exactly what's going on here.  I have Flashblock installed, and none of my tabs are pages with flash.

Obviously the stack here is kind of crap since I don't have any symbols for Flash.  Thread 0 looks like this:
ntdll!NtSetEvent
kernel32!SetEvent
NPSWF32+0xc9752
NPSWF32+0x90f0d

I have Flash 9.0 r47.
Version: unspecified → Trunk
Product: Firefox → Core
QA Contact: general → general
Do you have adblock plus installed? I do and I've been running into hangs on pages with flash on both windows and os x.

Is it possible for ABP to block object requests made by flash?

(I wonder if this is the same issue though, because I've only started seeing this in the last few days.)
Keywords: hang
OS: Windows XP → All
Hardware: PC → All
Nope. I use flashblock though. (as I mentioned)

You may want to refer to the daily build thread as there have been a number of posts regarding borwser hangs that appear related to Flash videos.

http://forums.mozillazine.org/viewtopic.php?t=648954&postdays=0&postorder=asc&postsperpage=15&start=0

Sadly in my cases, there are not brokenpad reports to refer to.
Breakpad doesn't catch hangs. You can reproduce what I did in comment 0 using the symbol server:
http://developer.mozilla.org/en/docs/How_to_get_a_stacktrace_with_WinDbg

Ted,

Thanks. In one or two of my instances yesterday, Minefield did, indeed, crash on me, but, as I said, they were not "caught." Bummer. 
That's likely bug 422308 then.

Ted, ah, yes, the brokenpad/Flash bug. ;-)~

If my memory serves, the crashes occurred during restart session restores until I closed the offending tab before the "nastiness" set in.
If you can get a stack with windbg, and show that it's the same thing as this bug, then great. If it's different, then please file a new bug. I realize this bug is pretty vague, but I had a stack so I figured I'd file it.

Filed bug 429682 with same symptoms, but different stack trace(?)
Note that I did not get symbols for NPSWF32.dll, so maybe it *is* the same issue.
Nobody but Adobe has symbols for NPSWF32.dll. :)

I'm hearing more and more reports of flash hangs.  Do we have an any idea how to fix this or identify the real problem?  Leaving on the nom list until this issue becomes a bit clearer.

I was getting a lot of the hangs constantly.  After I disabled Firebug (1.1; still installed just turned off), it stopped happening as often.

I have also experienced the Firebug crashes, but I've never seen it cause a hang (except when it starts eating memory like mad, but that doesn't happen here.)

People here are talking about Adblock and Flashblock... does anyone see this who doesn't have any extensions installed?

Lastly, I can't take the time to test each build individually at the moment, but I know this started around Wednesday this week, and without upgrading Flash (still on 115 or 47 or whatever I was on before.)  I may be able to test the builds much later.

-[Unknown]
From the forums it appears that everything was OK in the:
20080414 1838hrs build Broken
20080414 1645hrs build OK

Checkins from 1500hrs to 1900 hrs (wide to cover the bases)
http://bonsai.mozilla.org/cvsquery.cgi?treeid=default&module=PhoenixTinderbox&branch=HEAD&branchtype=match&dir=&file=&filetype=match&who=&whotype=match&sortby=Date&hours=2&date=explicit&mindate=2008-04-14+15%3A00%3A00&maxdate=2008-04-14+19%3A00%3A00&cvsroot=%2Fcvsroot

forum link: http://forums.mozillazine.org/viewtopic.php?t=649608 discussion is spread intermittantly across 2 pages so far...  
I had a number of crashes yesterday (20080417) even though I disabled my AdBlock Plus 0.7.5.4. If I get a chance, I will try to do Ted's WinDBG procedure and see if I can get a stack. It may be a little while before I can try it, though.

(In reply to comment #13)
> I was getting a lot of the hangs constantly.  After I disabled Firebug (1.1;
> still installed just turned off), it stopped happening as often.
> 
> I have also experienced the Firebug crashes, but I've never seen it cause a
> hang (except when it starts eating memory like mad, but that doesn't happen
> here.)
> 
> People here are talking about Adblock and Flashblock... does anyone see this
> who doesn't have any extensions installed?
> 
> Lastly, I can't take the time to test each build individually at the moment,
> but I know this started around Wednesday this week, and without upgrading Flash
> (still on 115 or 47 or whatever I was on before.)  I may be able to test the
> builds much later.
> 
> -[Unknown]
> 


Happens pretty consistently for me, when Adblock Plus (0.7.5.4) is enabled in Add-ons Manager, with the flash video on the following site: http://www.prefixmag.com/forum/prefix-forum/723/

With my main profile, it also happens if Flashblock (1.5.6a) is enabled on the site; however it does not happen with a clean profile and only Flashblock.

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9pre) Gecko/2008041807 Firefox/2.0.0.11 ID:2008041807

With ABP 0.7.5.4, scrolling to the middle of the following page (where a post  with embedded flash video players lies) always causes an instant hang for me:

http://www.mediavida.com/vertema.php?fid=41&tid=322579
The severity of this bug should be bumped up.  Between yesterday and today, I'm sure I've been forced to kill and relaunch my browser over 30 times.
Please see my comments here:

https://bugzilla.mozilla.org/show_bug.cgi?id=429813

This site (browse around it) causes the issue 100% within a few seconds:

http://www.speedmaster-mission.net/
I do not see any issue at all browsing around speedmaster-mission-net using the current trunk builds and the current release version of flash (9.0 r124) under either Windows/XP or Linux.

I would try updating flash if you are running an older version especially as there is a white paper that has been published to the internet explaining exactly how to exploit a vulnerability that exists in older versions of flash.
Oh.  I should have added that I do NOT use Adblock, Adblock Plus or Flashblock.
I have been getting tons of freezes.
Regression range is exactly the same as found in here(ie, 20080414 1838hrs build Broken, 20080414 1645hrs build OK)

Trace of the main thread at the time of freeze:

ntoskrnl.exe!ExReleaseResourceLite+0x2b4
ntoskrnl.exe!RtlInsertElementGenericTable+0x390
hal.dll+0x2ef2
js3250.dll!JS_GetPrototype+0x11
xul.dll!JVM_ShutdownJVM+0x21410
xul.dll!JVM_MaybeStartupLiveConnect+0x54a7f
xul.dll!NS_CycleCollectorSuspect_P+0x11dc

Website where I tested the freeze most of the time: http://www.dontclick.it

Adblock plus enabled => freeze often quickly, sometimes after extensive browsing of that website.
Adblock plus disabled => never got a freeze.
Forgot to add, this always happened on places with flash. Which is why I took the liberty to post in here and not create a new bug.(High chances this is the same issue)
Nevermind, https://bugzilla.mozilla.org/show_bug.cgi?id=418811 is a separate freeze bug... I was trying as many ways as possible to replicate this bug that I must have hit another bug in the process (418811)

418811 does not launch the crash reporter
I'm afraid it's not terribly useful, but I've just found this bug having recently installed ABP - I then had the browser hang on various sites with flash adverts. Removed ABP and haven't seen it since. Severity=critical seeing as this hangs the browser.
Severity: normal → critical
Please file a new bug and find a regression range. This is not the right bug. Note this was filed in *February* and as such doesn't explain the recent upswing in Flash hangs. I saw in the nightly thread someone had a regression range, file a bug blocking the bugs in that range and nominate it for blocking.
Status: NEW → RESOLVED
Closed: 17 years ago
Resolution: --- → INCOMPLETE
bug 429682 / bug 429903 are about the current hangs. I don't think any more steps to reproduce or user reports are needed.
Thanks Dolske.
Flags: blocking1.9?
You need to log in before you can comment on or make changes to this bug.