Closed
Bug 463696
Opened 16 years ago
Closed 16 years ago
Crafted BMP image will crash Firefox in Linux (XError: 'BadAlloc (insufficient resources for operation)')
Categories
(Core :: Graphics, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 424333
People
(Reporter: charlie.brown.uy, Assigned: charlie.brown.uy)
Details
(Keywords: testcase)
Attachments
(3 files, 1 obsolete file)
Test image
User-Agent: Firefox 3 Build Identifier: Mozilla/5.0 (X11; U; Linux i686; es-AR; rv:1.9.0.3) Gecko/2008092416 Firefox A BMP image with height = 65535 will make Firefox crash. Reproducible: Always Steps to Reproduce: 1. Try to open the crafted BMP Actual Results: Firefox instantly crashes. Expected Results: Display the image.
|
||
Updated•16 years ago
|
Component: General → ImageLib
Product: Firefox → Core
QA Contact: general → imagelib
Version: unspecified → 1.9.0 Branch
Attachment #346950 -
Attachment mime type: image/png → image/bmp
Attachment #346950 -
Attachment is obsolete: true
Attachment #346952 -
Attachment is obsolete: true
I'm trying to upload a test image but for some reason Bugzilla converts it to a wrong type despite I select "image/bmp". I'm uploading a gzipped version now.
|
||
Updated•16 years ago
|
Attachment #346952 -
Attachment mime type: image/png → image/bmp
|
|
||
Updated•16 years ago
|
Attachment #346952 -
Attachment is obsolete: false
|
|
||
Comment 5•16 years ago
|
||
Please provide a crash ID from this crash : https://developer.mozilla.org/En/How_to_get_a_stacktrace_for_a_bug_report
|
||
Comment 6•16 years ago
|
||
|
|
||
Comment 7•16 years ago
|
||
I think I have a patch for this somewhere...
Status: UNCONFIRMED → NEW
Component: ImageLib → GFX: Thebes
Ever confirmed: true
Flags: in-testsuite?
Keywords: testcase
QA Contact: imagelib → thebes
Summary: Crafted BMP image will crash Firefox in Linux → Crafted BMP image will crash Firefox in Linux (XError: 'BadAlloc (insufficient resources for operation)')
Whiteboard: DUPEME
Version: 1.9.0 Branch → unspecified
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → DUPLICATE
|
|
||
Comment 9•11 years ago
|
||
Crash test: https://hg.mozilla.org/integration/mozilla-inbound/rev/82e4f1b7bbb6
Flags: in-testsuite? → in-testsuite+
|
||
Comment 10•11 years ago
|
||
https://hg.mozilla.org/mozilla-central/rev/82e4f1b7bbb6
Assignee: nobody → charlie.brown.uy
You need to log in
before you can comment on or make changes to this bug.
Description
•