130497 - SVG segmentation violation on graphics generated by Dia

Status: RESOLVED DUPLICATE of bug 141252

(Core :: SVG, defect)

Description

[Kevin Smathers]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.8+) Gecko/20020220
BuildID:    2002030111

Starting program: /mnt/oldsys/home/kevin/moz/bin/mozilla-bin 
[New Thread 1024 (LWP 1402)]
[New Thread 2049 (LWP 1404)]
[New Thread 1026 (LWP 1405)]
[New Thread 2051 (LWP 1406)]
[New Thread 3076 (LWP 1407)]
[New Thread 4101 (LWP 1408)]
[New Thread 5126 (LWP 1418)]
[New Thread 6151 (LWP 1419)]
[New Thread 7176 (LWP 1420)]
[New Thread 8201 (LWP 1421)]
[New Thread 9226 (LWP 1422)]
[New Thread 10251 (LWP 1423)]
[New Thread 11276 (LWP 1424)]
[New Thread 12301 (LWP 1425)]
[New Thread 13326 (LWP 1426)]
[New Thread 14351 (LWP 1427)]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1024 (LWP 1402)]
0x40e4b694 in nsDocument::ResetToURI ()
   from /mnt/oldsys/home/kevin/moz/bin/components/libgkcontent.so
(gdb) bt
#0  0x40e4b694 in nsDocument::ResetToURI ()
   from /mnt/oldsys/home/kevin/moz/bin/components/libgkcontent.so
#1  0x40e4b4fb in nsDocument::Reset ()
   from /mnt/oldsys/home/kevin/moz/bin/components/libgkcontent.so
#2  0x40dc8edb in nsXMLDocument::Reset ()
   from /mnt/oldsys/home/kevin/moz/bin/components/libgkcontent.so
#3  0x40e4ba19 in nsDocument::StartDocumentLoad ()
   from /mnt/oldsys/home/kevin/moz/bin/components/libgkcontent.so
#4  0x40dc9add in nsXMLDocument::StartDocumentLoad ()
   from /mnt/oldsys/home/kevin/moz/bin/components/libgkcontent.so
#5  0x40ce3001 in nsContentDLF::CreateDocument ()
   from /mnt/oldsys/home/kevin/moz/bin/components/libgkcontent.so
#6  0x40ce2a99 in nsContentDLF::CreateInstance ()
   from /mnt/oldsys/home/kevin/moz/bin/components/libgkcontent.so
#7  0x4134c4a4 in nsDocShell::NewContentViewerObj ()
   from /mnt/oldsys/home/kevin/moz/bin/components/libdocshell.so
#8  0x4134bf7a in nsDocShell::CreateContentViewer ()
   from /mnt/oldsys/home/kevin/moz/bin/components/libdocshell.so
#9  0x4135a424 in nsDSURIContentListener::DoContent ()
   from /mnt/oldsys/home/kevin/moz/bin/components/libdocshell.so
#10 0x40c6c086 in nsDocumentOpenInfo::DispatchContent ()
   from /mnt/oldsys/home/kevin/moz/bin/components/liburiloader.so
#11 0x40c6b9af in nsDocumentOpenInfo::OnStartRequest ()
   from /mnt/oldsys/home/kevin/moz/bin/components/liburiloader.so
#12 0x40771db7 in nsFileChannel::OnStartRequest ()
   from /mnt/oldsys/home/kevin/moz/bin/components/libnecko.so
#13 0x40783793 in nsOnStartRequestEvent::HandleEvent ()
   from /mnt/oldsys/home/kevin/moz/bin/components/libnecko.so
#14 0x40729b83 in nsARequestObserverEvent::HandlePLEvent ()
   from /mnt/oldsys/home/kevin/moz/bin/components/libnecko.so
#15 0x40183b0f in PL_HandleEvent () at eval.c:41
#16 0x40183a1d in PL_ProcessPendingEvents () at eval.c:41
#17 0x40184adf in nsEventQueueImpl::ProcessPendingEvents () at eval.c:41
#18 0x41215fb6 in event_processor_callback ()
   from /mnt/oldsys/home/kevin/moz/bin/components/libwidget_gtk.so
#19 0x41215d05 in our_gdk_io_invoke ()
   from /mnt/oldsys/home/kevin/moz/bin/components/libwidget_gtk.so
#20 0x403b5f9e in g_io_unix_dispatch () from /usr/lib/libglib-1.2.so.0
#21 0x403b7773 in g_main_dispatch () from /usr/lib/libglib-1.2.so.0
#22 0x403b7d39 in g_main_iterate () from /usr/lib/libglib-1.2.so.0
#23 0x403b7eec in g_main_run () from /usr/lib/libglib-1.2.so.0
#24 0x402d2333 in gtk_main () from /usr/lib/libgtk-1.2.so.0
#25 0x412164a6 in nsAppShell::Run ()
   from /mnt/oldsys/home/kevin/moz/bin/components/libwidget_gtk.so
#26 0x411f4b02 in nsAppShellService::Run ()
   from /mnt/oldsys/home/kevin/moz/bin/components/libnsappshell.so
---Type <return> to continue, or q <return> to quit---



Reproducible: Always
Steps to Reproduce:
1.save svg file locally
2.display it


Actual Results:  browser crashed

Expected Results:  should have displayed a diagram

Comment 1

[Olivier Cahagne]

Can you attach the SVG file as testcase ?

Comment 2

[David Chester]

By default mozilla does not ship with a svg plugin, when I tried this it merely
offered the standard octet-stream response box. (used dia 0.88.1 to create svg)

I cannot reproduce this bug in 1.0rc1 linux. Reporter (Kevin Smathers),
please can you check to see whether this bug is still present in a recent build
(Moz1-RC1 or a new nightly build). If this bug does not occur please can you
resolve it worksforme. For further information on bug writing please see
http://www.mozilla.org/quality/bug-writing-guidelines.html

Comment 3

[David A. Madore]

I'm not sure whether this is actually the same bug, but when I load <URL:
http://www.w3.org/Graphics/SVG/Test/20011026/toc-sv.svg > (from the W3C's SVG1.0
Test Suite), as well as many other pages of the same suite, my Mozilla crashes
instantly.  This is on Linux (RedHat somewhere between 7.1 and 7.2, kernel
2.4.17), with a trunk build just a few days old compiled with
MOZ_INTERNAL_LIBART_LGPL=yes, and CONFIGURE="configure --disable-debug
--disable-tests --enable-optimize --enable-crypto --enable-mathml --enable-svg
--enable-xft"

Comment 4

[laozhu]

*** This bug has been confirmed by popular vote. ***

Comment 5

[Olivier Cahagne]

Seems to be dup of bug 141252, same stack.

Comment 6

[Alex Fritze]

Definitely a dup.

*** This bug has been marked as a duplicate of 141252 ***