1290341 - Crash: cairo_surface_reference: Assertion `((*&(&surface->ref_count)->ref_count) > 0)' failed.

Status: RESOLVED WONTFIX

(Core :: Graphics, defect, P3)

Description

[Christoph Diehl [:posidron]]

The following testcase crashes on en-us.linux-x86_64-asan.tar.bz2 revision 7339ed5e03791159421bc91995ebc7160d4976b2

See attachment.

Backtrace:

==12158==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7f0f339f727f bp 0x60300052eb20 sp 0x7f0f040ad6e0 T40)
firefox: /build/buildd/cairo-1.13.0~20140204/src/cairo-surface.c:928: cairo_surface_reference: Assertion `((*&(&surface->ref_count)->ref_count) > 0)' failed.

Comment 1

[Christoph Diehl [:posidron]]

Attachment: Testcase

Comment 2

[Jerry Shih[:jerry] (UTC+8) (inactive)]

(In reply to Christoph Diehl [:posidron] from comment #1)
> Created attachment 8775858 [details]
> Testcase

Hi Christoph, how to replay the crash with that attachment 8775858 [details]?
Do we have another fuzzer?

Comment 3

[Christoph Diehl [:posidron]]

You need to rename the *data file to .png. That should work.

Comment 4

[Jerry Shih[:jerry] (UTC+8) (inactive)]

The zip file contains:
BrowserAgent_Bucket
BrowserAgent_auxdat.txt
BrowserAgent_meta.txt
data_1_output_Output.txt
data_1_output_Output_fileName.txt

So the first step is rename data_1_output_Output.txt to data_1_output_Output.png?
And use our browser to open that png?
I'm not familiar with the testing flow.

Comment 5

[Christoph Diehl [:posidron]]

Correct Jerry, but always make sure you match the revision number and get an ASan build.

Comment 6

[Peter Chang[:pchang]]

Kevin, please help to check this.

Comment 7

[Kevin Chen[:kechen] (UTC + 8)]

I'm not actively working on this.

Comment 8

[Rares Doghi, Desktop QA]

Hi Jeff, Can we close this one as well ? I dont think this issue still applies either.

Comment 9

[Jeff Muizelaar [:jrmuizel]]

Sure