1368671 - integer overflow Firefox 53.0.2 (dwrite!DWriteCreateFactory)

Status: RESOLVED INCOMPLETE

(Core :: Graphics, defect)

Description

[ksloven]

Attachment: firefox53.0.2.zip containing original PDF, crashing PDF.

User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36

Steps to reproduce:

Fuzz a PDF and open it in firefox, with debugger attached.


Actual results:

It crashes with Access Violation: Interger Overflow (code c0000095)


Expected results:

The PDF should have opened without issues

Comment 1

[Ryan VanderMeulen (PTO, back July 27)]

I haven't been able to reproduce a crash with Win7 or Win10, but moving to Graphics in case they have better luck.

Comment 2

[ksloven]

Hi Daniel, I don't understand which further info you need.

Comment 3

[Daniel Veditz [:dveditz]]

I can't reproduce on Win 10 either, using a 53.0.2 32-bit release build (what this was reported against), a 64-bit 54-beta debug build, or a nightly. no sign of an integer overflow in the debugger. Did you let the first-chance exception fall through and see if it was something we handled? Did you try in a clean build or did you have add-ons installed?

Comment 4

[ksloven]

Attachment: foxdump.dmp

Comment 5

[ksloven]

(In reply to Daniel Veditz [:dveditz] from comment #3)
> I can't reproduce on Win 10 either, using a 53.0.2 32-bit release build
> (what this was reported against), a 64-bit 54-beta debug build, or a
> nightly. no sign of an integer overflow in the debugger.

Hmm, that is not what I'm finding on my machine right now. It still replicates...windows 10 Pro 64(10.0 Build 14393). I have attached the crash dump (foxdump.dmp) incase that is needed to dig down abit more.

Perhaps, it could be my graphics drivers? I currently have Intel HD graphics 4000 with drivers of version 10.18.10.4425 (date 4/4/2016). When I inquired about this bug to someone that knows better than he, he suggested it could be my drivers- but I can't get any updates for them when I check on Interl site.

> Did you let the
> first-chance exception fall through and see if it was something we handled?
> Did you try in a clean build or did you have add-ons installed?

This was a clean build, I had no add-ons, that I know of, installed

Comment 6

[Daniel Veditz [:dveditz]]

Did the Firefox crash reporter dialog come up? It sends us additional information that would be useful in debugging this. If you have submitted your crash open the about:crashes page and find the link to the crash report. Click it to make sure it was submitted and then paste the link to the crash here. Thanks!

Comment 7

[ksloven]

There are no crashes in Firefox crash reporter. But yet on both the machines I try it on, it still crashes in the same place.
But, since you can't reproduce - I reckon perhaps it's something with my hardware perhaps.
So we can close this. But if it occurs again, I will alert you.