Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8133523

_releaseObject called from wrong thread

    Details

    • Subcomponent:
    • Introduced In Version:
      7u4
    • Resolved In Build:
      b94
    • CPU:
      x86
    • OS:
      windows_8
    • Verification:
      Verified

      Backports

        Description

        FULL PRODUCT VERSION :


        ADDITIONAL OS VERSION INFORMATION :
        Windows 8.1

        A DESCRIPTION OF THE PROBLEM :
        At Mozilla we got multiple reports about Firefox crashes related to the Java plugin.

        We tracked it down to the plugin calling _releaseObject (NPN_releaseobject) from a thread other than the main thread. This can race with our JS GC and cause Firefox crashes.

        This affects multiple companies and intranet websites.


        REPRODUCIBILITY :
        This bug can be reproduced often.

          Issue Links

            Activity

            Hide
            rlewis Roger Lewis added a comment -
            Link to the bug being tracked by Mozilla: https://bugzilla.mozilla.org/show_bug.cgi?id=1140616
            Show
            rlewis Roger Lewis added a comment - Link to the bug being tracked by Mozilla: https://bugzilla.mozilla.org/show_bug.cgi?id=1140616
            Hide
            ddehaven David Dehaven added a comment -
            Adjusting priority of this issue:
            ILW=HMH => P1
            Show
            ddehaven David Dehaven added a comment - Adjusting priority of this issue: ILW=HMH => P1
            Hide
            ddehaven David Dehaven added a comment -
            The fix for this also addresses another Mozilla bug:
            https://bugzilla.mozilla.org/show_bug.cgi?id=1221448
            Show
            ddehaven David Dehaven added a comment - The fix for this also addresses another Mozilla bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1221448
            Hide
            idergali Ilya Dergalin (Inactive) added a comment -
            Mozilla bug reports mention that the issue is reproducible with 8u31 and 8u40 but the bug has label regression. Is it a mistake? If not in what release was it introduced?
            Show
            idergali Ilya Dergalin (Inactive) added a comment - Mozilla bug reports mention that the issue is reproducible with 8u31 and 8u40 but the bug has label regression. Is it a mistake? If not in what release was it introduced?
            Hide
            afomin Alexander Fomin (Inactive) added a comment - - edited
            We have to take it due to P1 and PSU15_04 respin. SQE verified the fix with 8u66 b18.
            Show
            afomin Alexander Fomin (Inactive) added a comment - - edited We have to take it due to P1 and PSU15_04 respin. SQE verified the fix with 8u66 b18.
            Hide
            stephenh Stephen Hu (Inactive) added a comment -
            Verified on Windows 7 / FF ESR 52.2.1 / 9b176 with Java Detection official applet (Open two tabs loading the same applet, close one tab, making sure the other is still running OK.)
            Show
            stephenh Stephen Hu (Inactive) added a comment - Verified on Windows 7 / FF ESR 52.2.1 / 9b176 with Java Detection official applet (Open two tabs loading the same applet, close one tab, making sure the other is still running OK.)

              People

              • Assignee:
                ddehaven David Dehaven
                Reporter:
                webbuggrp Webbug Group
              • Votes:
                0 Vote for this issue
                Watchers:
                14 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: