78753 - Topcrash for Trunk & M09 [@ EndImageFrame]

Status: VERIFIED FIXED

(Core :: Graphics: ImageLib, defect)

Description

[Shiva Thirumazhusai]

Easily reproducible crash. 

Steps to reproduce.

 - Go to the URL:  http://www.kansenki.net
 - After the page load it crashes.

FYI - Topcrash in the M09 Internal test.

EndImageFrame   2 
     First BBID :29875489
     Last BBID  :29880751
     Min Runtime :20
     Max Runtime :64
     First Appearance Date : 2001-05-01
     Last Appearance Date : 2001-05-01
     First BuildID : 2001050106
     Last BuildID : 2001050106

Stack Trace: 

         EndImageFrame  
[d:\builds\seamonkey\mozilla\modules\libpr0n\decoders\gif\nsGIFDecoder2.cpp  
line 309]
         gif_write      
[d:\builds\seamonkey\mozilla\modules\libpr0n\decoders\gif\GIF2.cpp  line 1498]
         nsGIFDecoder2::ProcessData     
[d:\builds\seamonkey\mozilla\modules\libpr0n\decoders\gif\nsGIFDecoder2.cpp  
line 
164]
         nsInputStreamTee::ReadSegments 
[d:\builds\seamonkey\mozilla\xpcom\io\nsInputStreamTee.cpp  line 138]
         nsGIFDecoder2::WriteFrom       
[d:\builds\seamonkey\mozilla\modules\libpr0n\decoders\gif\nsGIFDecoder2.cpp  
line 
190]
         imgRequest::OnDataAvailable    
[d:\builds\seamonkey\mozilla\modules\libpr0n\src\imgRequest.cpp  line 771]
         ProxyListener::OnDataAvailable 
[d:\builds\seamonkey\mozilla\modules\libpr0n\src\imgLoader.cpp  line 374]
         nsHTTPFinalListener::OnDataAvailable   
[d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHTTPResponseListener.cp
p  line 1177]
         nsStreamListenerTee::OnDataAvailable   
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsStreamListenerTee.cpp  line 
57]
         nsHTTPServerListener::OnDataAvailable  
[d:\builds\seamonkey\mozilla\netwerk\protocol\http\src\nsHTTPResponseListener.cp
p  line 543]
         nsOnDataAvailableEvent::HandleEvent    
[d:\builds\seamonkey\mozilla\netwerk\base\src\nsStreamListenerProxy.cpp  
line 183]
         PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c  
line 589]
         PL_ProcessPendingEvents        
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c  line 522]
         _md_EventReceiverProc  
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c  line 1070]
         nsAppShellService::Run 
[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsAppShellService.cpp  line 408]
         main1  [d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp  
line 1012]
         main   [d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp  
line 1309]
         WinMain        
[d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp  line 1327]
         WinMainCRTStartup()
         KERNEL32.DLL + 0x192a6 (0x77e792a6)
 
        Source File : 
http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/modules/libpr0n/decoders/gif
/nsGIFDecoder2.cpp line : 
309
     (29880751) URL: http://www.kansenki.net
     (29875489) URL: www.pk.com

Comment 1

[doctor__j]

The cause of crash lies on the little CGI generated bottom left GIF:

http://dotalkcaffe.virtualave.net/cgi-bin/kansenki/access/access2.cgi

Load this URL into the browser and get a crash...

Comment 2

[Blake Ross]

pav/saari, did either of you fix this already?

-> saari

Comment 3

[saari (gone)]

I fixed it yesterday on the trunk

Comment 4

[Blake Ross]

Do we want this fix on the branch?

Comment 5

[Jay Patel [:jay]]

Marking this Verified Fixed.  This crash last occurred on the TRUNK with build 
2001050522.  

This crash is still a topcrasher for the M09 branch though, so adding M09 
topcrasher tracking bug 80378 to the dependency tree.

Comment 6

[Shiva Thirumazhusai]

Removing dependency.

Comment 7

[Hixie (not reading bugmail)]

The Image Conversion Library component is going away.