1172775 - crash in OOM | large | NS_ABORT_OOM(unsigned int) | nsAString_internal::Assign(nsSubstringTuple const&) | nsAutoString::nsAutoString(nsSubstringTuple const&)

Status: RESOLVED DUPLICATE of bug 1033090

(Core :: Graphics: ImageLib, defect)

Description

[alex_mayorga]

This bug was filed from the Socorro interface and is 
report bp-966f9fb9-a2d6-416c-8f35-e2c642150603.
=============================================================

Crashing Thread
Frame 	Module 	Signature 	Source
0 	xul.dll 	NS_ABORT_OOM(unsigned int) 	xpcom/base/nsDebugImpl.cpp
1 	xul.dll 	nsAString_internal::Assign(nsSubstringTuple const&) 	xpcom/string/nsTSubstring.cpp
2 	xul.dll 	nsAutoString::nsAutoString(nsSubstringTuple const&) 	xpcom/string/nsTString.h
3 	xul.dll 	mozilla::image::Decoder::Finish() 	image/src/Decoder.cpp
4 	xul.dll 	mozilla::image::DecodePool::NotifyDecodeComplete(mozilla::image::Decoder*) 	image/src/DecodePool.cpp
5 	xul.dll 	mozilla::image::DecodePool::Decode(mozilla::image::Decoder*) 	image/src/DecodePool.cpp
6 	xul.dll 	mozilla::image::RasterImage::Decode(mozilla::Maybe<mozilla::gfx::IntSizeTyped<mozilla::gfx::UnknownUnits> > const&, unsigned int) 	image/src/RasterImage.cpp

Comment 1

[Mats Palmgren (inactive)]

We might want to limit the size of the URI here:
http://hg.mozilla.org/releases/mozilla-beta/annotate/86659b66da94/image/src/Decoder.cpp#l304

Comment 2

[Mason Chang [Inactive] [:mchang]]

Hey Seth, does this make any sense to you?

Comment 3

[Seth Fowler [:seth] [:s2h]]

This is fixed in Firefox 41. See bug 1033090.