111996 - Crash on http://www.scriptaworks.com (libimgpng)

Status: VERIFIED DUPLICATE of bug 89595

(Core :: Graphics: ImageLib, defect)

Description

[Yanko Kaneti]

a bunch of:
libpng warning: Ignoring bad adaptive filter type
libpng warning: Ignoring bad adaptive filter type
libpng warning: Ignoring bad adaptive filter type
libpng warning: Ignoring bad adaptive filter type
libpng warning: Ignoring bad adaptive filter type
...

and:
libpng error: IDAT: CRC error

Program received signal SIGSEGV, Segmentation fault.
0x40479f94 in __sigsetjmp () from /lib/libc.so.6
(gdb) bt
#0  0x40479f94 in __sigsetjmp () from /lib/libc.so.6
#1  0x411d447b in NSGetModule () from /usr/lib/mozilla/components/libimgpng.so
#2  0x401268ae in nsInputStreamTee::WriteSegmentFun ()
   from /usr/lib/libxpcom.so
#3  0x4012968f in nsPipe::nsPipeInputStream::ReadSegments ()
   from /usr/lib/libxpcom.so
#4  0x40126b33 in nsInputStreamTee::ReadSegments () from /usr/lib/libxpcom.so
#5  0x411d44f3 in NSGetModule () from /usr/lib/mozilla/components/libimgpng.so
#6  0x40c8eeba in NSGetModule () from /usr/lib/mozilla/components/libimglib2.so
#7  0x40c8db8d in NSGetModule () from /usr/lib/mozilla/components/libimglib2.so
#8  0x4082751d in NSGetModule () from /usr/lib/mozilla/components/libnecko.so
#9  0x4085548e in NSGetModule () from /usr/lib/mozilla/components/libnecko.so
#10 0x40826a6a in NSGetModule () from /usr/lib/mozilla/components/libnecko.so
#11 0x40819d58 in NSGetModule () from /usr/lib/mozilla/components/libnecko.so
#12 0x4013ed17 in PL_HandleEvent () from /usr/lib/libxpcom.so
#13 0x4013ec33 in PL_ProcessPendingEvents () from /usr/lib/libxpcom.so
#14 0x4013fb68 in nsEventQueueImpl::ProcessPendingEvents ()
   from /usr/lib/libxpcom.so
#15 0x406d46d3 in NSGetModule ()
   from /usr/lib/mozilla/components/libwidget_gtk.so
#16 0x406d444d in NSGetModule ()
......

Comment 1

[Yanko Kaneti]

a better debug putput at 
http://bugzilla.gnome.org/show_bug.cgi?id=65421

Comment 2

[Matthias Versen [:Matti]]

-> Dupe of bug 89595

win2k stack trace :
MSVCRTD! _setjmp3 + 4 bytes
nsInputStreamTee::WriteSegmentFun(nsIInputStream * 0x045b1f90, void * 
0x045a5300, const char * 0x045aee10, unsigned int 0, unsigned int 1448, unsigned 
int * 0x0012f8f8) line 96 + 33 bytes
nsPipe::nsPipeInputStream::ReadSegments(nsPipe::nsPipeInputStream * const 
0x045b1f90, unsigned int (nsIInputStream *, void *, const char *, unsigned int, 
unsigned int, unsigned int *)* 0x1005a9e0 
nsInputStreamTee::WriteSegmentFun(nsIInputStream *, void *, const char *, 
unsigned int, unsigned int, unsigned int *), void * 0x045a5300, unsigned int 
1448, unsigned int * ...) line 426 + 
nsInputStreamTee::ReadSegments(nsInputStreamTee * const 0x045a5300, unsigned int 
(nsIInputStream *, void *, const char *, unsigned int, unsigned int, unsigned 
int *)* 0x041b1960 ReadDataOut(nsIInputStream *, void *, const char *, unsigned 
int, unsigned int, unsigned int *), void * 0x0459e498, unsigned int 1448, 
unsigned int * 0x0012fb50) line 153
nsPNGDecoder::WriteFrom(nsPNGDecoder * const 0x0459e498, nsIInputStream * 
0x045a5300, unsigned int 1448, unsigned int * 0x0012fb50) line 147
imgRequest::OnDataAvailable(imgRequest * const 0x04520388, nsIRequest * 
0x044982d0, nsISupports * 0x00000000, nsIInputStream * 0x045a5300, unsigned int 
17028, unsigned int 1448) line 720 + 47 bytes
ProxyListener::OnDataAvailable(ProxyListener * const 0x042e9310, nsIRequest * 
0x044982d0, nsISupports * 0x00000000, nsIInputStream * 0x045a5300, unsigned int 
17028, unsigned int 1448) line 501
nsStreamListenerTee::OnDataAvailable(nsStreamListenerTee * const 0x03b13620, 
nsIRequest * 0x044982d0, nsISupports * 0x00000000, nsIInputStream * 0x045b1f90, 
unsigned int 17028, unsigned int 1448) line 56 + 51 bytes
nsHttpChannel::OnDataAvailable(nsHttpChannel * const 0x044982d4, nsIRequest * 
0x0440a3d4, nsISupports * 0x00000000, nsIInputStream * 0x045b1f90, unsigned int 
17028, unsigned int 1448) line 2349 + 57 bytes
nsOnDataAvailableEvent::HandleEvent() line 193 + 70 bytes
nsARequestObserverEvent::HandlePLEvent(PLEvent * 0x0457565c) line 80
PL_HandleEvent(PLEvent * 0x0457565c) line 590 + 10 bytes
PL_ProcessPendingEvents(PLEventQueue * 0x00e9a440) line 520 + 9 bytes
_md_EventReceiverProc(HWND__ * 0x003b03f0, unsigned int 49434, unsigned int 0, 
long 15311936) line 1071 + 9 bytes
USER32! 77e02e98()
USER32! 77e030e0()
USER32! 77e05824()
nsAppShellService::Run(nsAppShellService * const 0x00ee2d20) line 303
main1(int 2, char * * 0x003526f0, nsISupports * 0x00000000) line 1304 + 32 bytes
main(int 2, char * * 0x003526f0) line 1630 + 37 bytes
mainCRTStartup() line 338 + 17 bytes
KERNEL32! 77e87d08()

*** This bug has been marked as a duplicate of 89595 ***

Comment 3

[Terri Preston]

Verified Duplicate