131572 - Visiting URL causes M099 to bomb, and cannot be killed with ctrl-alt-del [@ nsImageGTK::DrawToImage]

Status: RESOLVED WORKSFORME

(Core Graveyard :: Image: Painting, defect)

Description

[Evan Hoffman]

Visited http://www.icrontic.com/index.php?page=public/articles&articleId=170
(linked from Slashdot today) in Mozilla 0.9.9 and got a fatal error and was
unable to kill mozilla.  Comp is an Athlon 1333 with 512 MB ram running win98se.

Comment 1

[Markus Långström]

WFM, 2002030803 Win 98.

Comment 2

[Adam Hauner]

WFM 2002031608/Win2K

Comment 3

[Olivier Cahagne]

wfm using build 20020315008 on Linux and build 2002031608 on Win2k.

Comment 4

[Matthias Versen [:Matti]]

*** Bug 131583 has been marked as a duplicate of this bug. ***

Comment 5

[Adam Hauner]

From duped bug 131583 (2002031104):
During page load, the browser becomes non-responsive.  A dialog pops up to say
it crashed and close Mozilla, but Mozilla doesn't fully close.  It's no longer
in the task list, but the window is visible. Although I'm using a talkback
build, talkback doesn't appear after this crash.

Adding crash.

Comment 6

[rogerwh80]

Details from crash dialog, moz 0.9.9 (2002031104) on win98se:

MOZILLA caused a divide error in module <unknown> at 0000:00000204.
Registers:
EAX=97800000 CS=003b EIP=00000204 EFLGS=00000097
EBX=00010001 SS=318f ESP=00000fd0 EBP=0000b304
ECX=00000001 DS=202f ESI=e5967000 FS=428f
EDX=00000000 ES=32e7 EDI=e5b8f1c0 GS=365f
Bytes at CS:EIP:
cd 30 cd 30 cd 30 cd 30 cd 30 cd 30 cd 30 cd 30 
Stack dump:
003b0204 3c700006 0246034f 365fb304 0064e5b4 e73f0ff8 00000390 00000000 0000003a
00000204 0000003b 00000246 00000000 00000000 00000000 00000000 

Comment 7

[Joshua Knapp]

Crashed for me, 2002031608/Win98SE.  This is the same thing that happens to me 
when I go to Techbargains as reported in Bug #131446.  Comp is an Athlon 1.4GHz 
with 512MB ram.

Comment 8

[Adam Hauner]

Can you please use a talkback enabled build?
After talkback crashed and talkback automatically submitted the crash run 
"mozilla/bin/components/talkback.exe" manually and poste the talkback ID of that
crash in this bug.

Comment 9

[Jyri Heinonen]

I have similar problems with the Moz 0.9.9 installed on my home PC
(Duron-900/256MB running Win98) in the pages mentioned above and also in below page.

http://www.peliportti.net/pelit/palvelimet.cgi

However, Moz 0.9.9 works fine with these pages when I use my laptop
(PII-450/128MB running Win98SE) or the Linux-installation in my home PC.

Talkback won't activate after the crash, even it's enabled.

Comment 10

[Craig Prescott]

I can confirm that Mozilla 0.9.9 segfaults consistently on RedHat 7.1
Linux/Alpha for quite a 
number of pages, including this one.

Here's a couple more:

http://www.linuxjournal.com//article.php?sid=595
http://slashdot.org/askslashdot/02/03/23/2248240.shtml?tid=126

(lots of slashdot articles kill mozilla; so does the current slashdot front page).

Mozilla 0.9.8 does not exhibit this problem.

They all die in the same place in nsImageGTK::DrawToImage ().

Comment 11

[Craig Prescott]

Attachment: gdb backtrace

Backtrace for segfault of
http://www.icrontic.com/index.php?page=public/articles&articleId=170.

Let me know if you would like to see backtraces for the other pages, or how I
can be more helpful.

Comment 12

[Anttu Koski]

Bug 134170 has more information about the crash.

Comment 13

[Andrew Hagen]

Worksforme 1.0 RC1 branch Build ID: 2002042906 Windows 98.

Reporter, can you try this again with a recent Mozilla build?

Comment 14

[Andrew Hagen]

Is this bug limited to Athlon systems?

Comment 15

[rogerwh80]

Not an Athlon-only bug, or at least not with 0.9.9.  I experienced it on a PIII
800 with Moz 0.9.9.  I'll check using Moz 1.0 RC 1 soon.

Comment 16

[Matthias Versen [:Matti]]

-> GXF ?

Comment 17

[Olivier Cahagne]

*** Bug 147248 has been marked as a duplicate of this bug. ***

Comment 18

[Kevin McCluskey (gone)]

From the stack in comment #11 in looks like an imagelib issue.

Comment 19

[Adam Hauner]

(Changing OS to All regarding comment #10.)

Comment 20

[Jyri Heinonen]

I believe that bug 134170 and bug 131446 are also duplicates for this one. At
least the behaviour seems to be similar.

Comment 21

[Evan Hoffman]

Doesn't seem to be happening anymore, though I'm using 1.0rc3 on Win2k now.  Hooray!

Comment 22

[Lorenzo Colitti]

Everyone crashing here: this is probably a dup of bug 128961. Can you see if you
get the same symptoms using the minimal testcase in that bug?

You can find it here (warning, you may crash and have to reboot!):

http://bugzilla.mozilla.org/attachment.cgi?id=86942&action=view

Comment 23

[Raj Bhaskar]

If anyone's still watching this bug, the given URL and the minimal testcase in
comment 22 WFM with build 2003-04-07-08 on Win2K SP3

Comment 24

[Asa Dotzler [:asa]]

This bug worksforme with Windows Seamonkey builds 2004020909