Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-4845182

Crash, Java applet returns a number as a string to JS, script modifies the numbe

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: P4 P4
    • 5.0
    • 1.4.2
    • deploy
    • tiger
    • x86
    • linux



      Name: gm110360 Date: 04/08/2003


      FULL PRODUCT VERSION :
      java version "1.4.2-beta"
      Java(TM) 2 Runtime Environment, Standard Edition (build 1.4.2-beta-b19)
      Java HotSpot(TM) Client VM (build 1.4.2-beta-b19, mixed mode)

      FULL OS VERSION :
      Linux wolruf 2.4.20 #6 Sat Feb 8 02:10:18 CET 2003 i686 unknown

      EXTRA RELEVANT SYSTEM CONFIGURATION :
      Mozilla 20030408 (built from CVS) with GCC 2.96, using classic JRE (not the one compiled with GCC 3.2).

      A DESCRIPTION OF THE PROBLEM :
      I'm not the original bug reporter, please check http://bugzilla.mozilla.org/show_bug.cgi?id=201164
      Could be related to bugtraq #4836462.

      STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
      See testcase here: http://bzimage.dk/mozilla_crash/test.html (from http://bugzilla.mozilla.org/show_bug.cgi?id=201164 )

      EXPECTED VERSUS ACTUAL BEHAVIOR :
      alert box saying 0
      crashes Mozilla (as it crashes JRE)

      ERROR MESSAGES/STACK TRACES THAT OCCUR :
      Unexpected Signal : 11 occurred at PC=0x403044A7
      Function=(null)+0x403044A7
      Library=/usr/lib/j2re1.4.2/lib/i386/client/libjvm.so

      NOTE: We are unable to locate the function name symbol for the error
            just occurred. Please refer to release documentation for possible
            reason and solutions.


      Current Java thread:
              at sun.plugin.navig.motif.AThread.handleRequest(Native Method)
              at sun.plugin.navig.motif.AThread.JNIHandleLoop(Unknown Source)
              at sun.plugin.navig.motif.AThread.run(Unknown Source)

      Dynamic libraries:
      08048000-0804b000 r-xp 00000000 03:01 1469443 /usr/lib/j2re1.4.2/bin/java_vm
      0804b000-0804c000 rw-p 00002000 03:01 1469443 /usr/lib/j2re1.4.2/bin/java_vm
      40000000-40015000 r-xp 00000000 03:01 636484 /lib/ld-2.2.4.so
      40015000-40016000 rw-p 00014000 03:01 636484 /lib/ld-2.2.4.so
      40016000-4001e000 r-xp 00000000 03:01 1469459 /usr/lib/j2re1.4.2/lib/i386/native_threads/libhpi.so
      4001e000-4001f000 rw-p 00007000 03:01 1469459 /usr/lib/j2re1.4.2/lib/i386/native_threads/libhpi.so
      40021000-4002f000 r-xp 00000000 03:01 636529 /lib/libpthread-0.9.so
      4002f000-40037000 rw-p 0000d000 03:01 636529 /lib/libpthread-0.9.so
      40037000-40039000 r-xp 00000000 03:01 636497 /lib/libdl-2.2.4.so
      40039000-4003b000 rw-p 00001000 03:01 636497 /lib/libdl-2.2.4.so
      4003b000-4016d000 r-xp 00000000 03:01 636493 /lib/libc-2.2.4.so
      4016d000-40173000 rw-p 00131000 03:01 636493 /lib/libc-2.2.4.so
      40177000-4056c000 r-xp 00000000 03:01 1485409 /usr/lib/j2re1.4.2/lib/i386/client/libjvm.so
      4056c000-40588000 rw-p 003f4000 03:01 1485409 /usr/lib/j2re1.4.2/lib/i386/client/libjvm.so
      4059a000-405ac000 r-xp 00000000 03:01 636502 /lib/libnsl-2.2.4.so
      405ac000-405ae000 rw-p 00011000 03:01 636502 /lib/libnsl-2.2.4.so
      405b0000-405d1000 r-xp 00000000 03:01 636499 /lib/libm-2.2.4.so
      405d1000-405d2000 rw-p 00020000 03:01 636499 /lib/libm-2.2.4.so
      405d2000-405d6000 rw-s 00000000 03:01 294360 /tmp/hsperfdata_ocahagne/15118
      405d6000-405d9000 r--s 00000000 03:01 1485414 /usr/lib/j2re1.4.2/lib/ext/dnsns.jar
      405d9000-405db000 r-xp 00000000 03:01 1991068 /usr/X11R6/lib/X11/locale/common/xlcDef.so.2
      405db000-405dc000 rw-p 00001000 03:01 1991068 /usr/X11R6/lib/X11/locale/common/xlcDef.so.2
      405dc000-405e5000 r-xp 00000000 03:01 636518 /lib/libnss_files-2.2.4.so
      405e5000-405e7000 rw-p 00008000 03:01 636518 /lib/libnss_files-2.2.4.so
      405e7000-405f7000 r-xp 00000000 03:01 1469467 /usr/lib/j2re1.4.2/lib/i386/libverify.so
      405f7000-405f9000 rw-p 0000f000 03:01 1469467 /usr/lib/j2re1.4.2/lib/i386/libverify.so
      405f9000-40619000 r-xp 00000000 03:01 1469468 /usr/lib/j2re1.4.2/lib/i386/libjava.so
      40619000-4061b000 rw-p 0001f000 03:01 1469468 /usr/lib/j2re1.4.2/lib/i386/libjava.so
      4061b000-4062f000 r-xp 00000000 03:01 1469470 /usr/lib/j2re1.4.2/lib/i386/libzip.so
      4062f000-40632000 rw-p 00013000 03:01 1469470 /usr/lib/j2re1.4.2/lib/i386/libzip.so
      40632000-41cfc000 r--s 00000000 03:01 1469527 /usr/lib/j2re1.4.2/lib/rt.jar
      41d46000-41d5c000 r--s 00000000 03:01 1469491 /usr/lib/j2re1.4.2/lib/sunrsasign.jar
      41d5c000-41e33000 r--s 00000000 03:01 1469500 /usr/lib/j2re1.4.2/lib/jsse.jar
      41e33000-41e44000 r--s 00000000 03:01 1469492 /usr/lib/j2re1.4.2/lib/jce.jar
      41e44000-4238c000 r--s 00000000 03:01 1469519 /usr/lib/j2re1.4.2/lib/charsets.jar
      4238c000-42544000 r--s 00000000 03:01 1469520 /usr/lib/j2re1.4.2/lib/plugin.jar
      445ec000-445ee000 r-xp 00000000 03:01 897729 /usr/lib/gconv/ISO8859-1.so
      445ee000-445ef000 rw-p 00001000 03:01 897729 /usr/lib/gconv/ISO8859-1.so
      4c670000-4c69b000 r--p 00000000 03:01 1583062 /usr/share/locale/ISO-8859-1/LC_CTYPE
      4c69b000-4c6b7000 r--s 00000000 03:01 1485413 /usr/lib/j2re1.4.2/lib/ext/sunjce_provider.jar
      4c6b7000-4c6c4000 r--s 00000000 03:01 1485416 /usr/lib/j2re1.4.2/lib/ext/ldapsec.jar
      4c6c4000-4c77f000 r--s 00000000 03:01 1486036 /usr/lib/j2re1.4.2/lib/ext/localedata.jar
      4c77f000-4ca4a000 r-xp 00000000 03:01 1469478 /usr/lib/j2re1.4.2/lib/i386/libawt.so
      4ca4a000-4ca5f000 rw-p 002ca000 03:01 1469478 /usr/lib/j2re1.4.2/lib/i386/libawt.so
      4ca85000-4cad8000 r-xp 00000000 03:01 1469477 /usr/lib/j2re1.4.2/lib/i386/libmlib_image.so
      4cad8000-4cad9000 rw-p 00052000 03:01 1469477 /usr/lib/j2re1.4.2/lib/i386/libmlib_image.so
      4cae3000-4caea000 r-xp 00000000 03:01 1599401 /usr/X11R6/lib/libXp.so.6.2
      4caea000-4caeb000 rw-p 00006000 03:01 1599401 /usr/X11R6/lib/libXp.so.6.2
      4caeb000-4cb39000 r-xp 00000000 03:01 1599407 /usr/X11R6/lib/libXt.so.6.0
      4cb39000-4cb3d000 rw-p 0004d000 03:01 1599407 /usr/X11R6/lib/libXt.so.6.0
      4cb3d000-4cb4b000 r-xp 00000000 03:01 1599389 /usr/X11R6/lib/libXext.so.6.4
      4cb4b000-4cb4c000 rw-p 0000d000 03:01 1599389 /usr/X11R6/lib/libXext.so.6.4
      4cb4c000-4cb51000 r-xp 00000000 03:01 1599409 /usr/X11R6/lib/libXtst.so.6.1
      4cb51000-4cb52000 rw-p 00004000 03:01 1599409 /usr/X11R6/lib/libXtst.so.6.1
      4cb52000-4cc16000 r-xp 00000000 03:01 1599381 /usr/X11R6/lib/libX11.so.6.2
      4cc16000-4cc19000 rw-p 000c3000 03:01 1599381 /usr/X11R6/lib/libX11.so.6.2
      4cc19000-4cc21000 r-xp 00000000 03:01 1599379 /usr/X11R6/lib/libSM.so.6.0
      4cc21000-4cc22000 rw-p 00007000 03:01 1599379 /usr/X11R6/lib/libSM.so.6.0
      4cc22000-4cc36000 r-xp 00000000 03:01 1599375 /usr/X11R6/lib/libICE.so.6.3
      4cc36000-4cc37000 rw-p 00013000 03:01 1599375 /usr/X11R6/lib/libICE.so.6.3
      4cc39000-4cc4b000 r-xp 00000000 03:01 1469465 /usr/lib/j2re1.4.2/lib/i386/libjavaplugin_jni.so
      4cc4b000-4cc4d000 rw-p 00011000 03:01 1469465 /usr/lib/j2re1.4.2/lib/i386/libjavaplugin_jni.so
      4cc61000-4cd1b000 r-xp 00000000 03:01 1469481 /usr/lib/j2re1.4.2/lib/i386/libfontmanager.so
      4cd1b000-4cd35000 rw-p 000b9000 03:01 1469481 /usr/lib/j2re1.4.2/lib/i386/libfontmanager.so
      4cd36000-4cd50000 r-xp 00000000 03:01 1991067 /usr/X11R6/lib/X11/locale/common/ximcp.so.2
      4cd50000-4cd53000 rw-p 00019000 03:01 1991067 /usr/X11R6/lib/X11/locale/common/ximcp.so.2
      4cd53000-4cd63000 r-xp 00000000 03:01 1469473 /usr/lib/j2re1.4.2/lib/i386/libnet.so
      4cd63000-4cd64000 rw-p 0000f000 03:01 1469473 /usr/lib/j2re1.4.2/lib/i386/libnet.so
      4cd64000-4cd6e000 r-xp 00000000 03:01 636526 /lib/libnss_nisplus-2.2.4.so
      4cd6e000-4cd6f000 rw-p 00009000 03:01 636526 /lib/libnss_nisplus-2.2.4.so
      4cd6f000-4cd79000 r-xp 00000000 03:01 636523 /lib/libnss_nis-2.2.4.so
      4cd79000-4cd7a000 rw-p 00009000 03:01 636523 /lib/libnss_nis-2.2.4.so
      4cd7a000-4cd7d000 r-xp 00000000 03:01 636515 /lib/libnss_dns-2.2.4.so
      4cd7d000-4cd7e000 rw-p 00002000 03:01 636515 /lib/libnss_dns-2.2.4.so
      4cd7e000-4cd8c000 r-xp 00000000 03:01 636531 /lib/libresolv-2.2.4.so
      4cd8c000-4cd8e000 rw-p 0000d000 03:01 636531 /lib/libresolv-2.2.4.so
      4cd90000-4cdab000 r-xp 00000000 03:01 1469480 /usr/lib/j2re1.4.2/lib/i386/libdcpr.so
      4cdab000-4cdbe000 rw-p 0001a000 03:01 1469480 /usr/lib/j2re1.4.2/lib/i386/libdcpr.so
      4cdbe000-4cdd6000 rw-s 00000000 00:04 9633796 /SYSV00000000 (deleted)

      Heap at VM Abort:
      Heap
       def new generation total 576K, used 169K [0x445f0000, 0x44690000, 0x44ad0000)
        eden space 512K, 26% used [0x445f0000, 0x446115f8, 0x44670000)
        from space 64K, 56% used [0x44680000, 0x44689010, 0x44690000)
        to space 64K, 0% used [0x44670000, 0x44670000, 0x44680000)
       tenured generation total 1408K, used 1377K [0x44ad0000, 0x44c30000, 0x485f0000)
         the space 1408K, 97% used [0x44ad0000, 0x44c286d0, 0x44c28800, 0x44c30000)
       compacting perm gen total 4864K, used 4634K [0x485f0000, 0x48ab0000, 0x4c5f0000)
         the space 4864K, 95% used [0x485f0000, 0x48a76b88, 0x48a76c00, 0x48ab0000)

      Local Time = Tue Apr 8 21:44:41 2003
      Elapsed Time = 15
      #
      # HotSpot Virtual Machine Error : 11
      # Error ID : 4F530E43505002EF
      # Please report this error at
      # http://java.sun.com/cgi-bin/bugreport.cgi
      #
      # Java VM: Java HotSpot(TM) Client VM (1.4.2-beta-b19 mixed mode)
      #

      REPRODUCIBILITY :
      This bug can be reproduced always.

      ---------- BEGIN SOURCE ----------
      java applet:
      import java.applet.*;
      public class test extends Applet {
          public String str() {
              return "" + (10);
          }
      }
       
      html code:
      <applet name="test" code="test.class"></applet>
       
      <script language="JavaScript">
      function fnc() {
      tal = document.test.str();
      alert(tal-10);
      }
      </script>
      <a href="javascript:fnc()">test</a>
      ---------- END SOURCE ----------
      (Review ID: 183755)
      ======================================================================

            xlu Xiaobin Lu (Inactive)
            gmanwanisunw Girish Manwani (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: