150070 - Crash in nsSVGRenderingContext::InitializeBuffer() while printing SVG

Status: RESOLVED WONTFIX

(Core :: SVG, defect)

Description

[Roland Mainz]

2002-05-31-08-trunk GTK+ toolkit build with SVG enabled using Sun Workshop 7FCS,
Solaris 2.7/SPARC; printing with Xprint module the example URL
(/http://www.croczilla.com/svg/tiger.xml):

The print session crashes like this:
-- snip --
WARNING: SetUpFontCharSetInfo: charset = 'ISO-8859-1', file
nsFontMetricsXlib.cpp, line 2192
###!!! ASSERTION: You can't dereference a NULL nsCOMPtr with operator->().:
'mRawPtr != 0', file ../../../../dist/include/xpcom/nsCOMPtr.h, line 650
Break: at file ../../../../dist/include/xpcom/nsCOMPtr.h, line 650
t@1 (l@1) signal SEGV (no mapping at the fault address) in
nsSVGRenderingContext::InitializeBuffer dbx: warning: can't find file
"/shared/bigtmp2/mozilla/2002-05-31-08-trunk/objdir_ws7ea2_gtk_svg/layout/build/nsSVGRenderingContext.o"
dbx: warning: see `help finding-files'
at 0xfb49957c
0xfb49957c: InitializeBuffer+0x0264:    ld      [%o0], %i3
dbx: warning: can't find file
"/shared/bigtmp2/mozilla/2002-05-31-08-trunk/objdir_ws7ea2_gtk_svg/layout/build/nsSVGOuterSVGFrame.o"
dbx: warning: can't find file
"/shared/bigtmp2/mozilla/2002-05-31-08-trunk/objdir_ws7ea2_gtk_svg/layout/build/nsContainerFrame.o"
dbx: warning: can't find file
"/shared/bigtmp2/mozilla/2002-05-31-08-trunk/objdir_ws7ea2_gtk_svg/layout/build/nsPageContentFrame.o"
dbx: warning: can't find file
"/shared/bigtmp2/mozilla/2002-05-31-08-trunk/objdir_ws7ea2_gtk_svg/layout/build/nsPresShell.o"
Current function is nsView::Paint (optimized)
  278           observer->Paint((nsIView *)this, rc, rect);
(dbx) print this
dbx: Can only evaluate parameters when stopped at first line
in optimized functions
(dbx) where
current thread: t@1
  [1] nsSVGRenderingContext::InitializeBuffer(0xffbee51c, 0x9d16f0, 0xffbee424,
0x9d16f0, 0xffbee3f0, 0xffbee420), at 0xfb49957c
  [2] nsSVGRenderingContext::nsSVGRenderingContext(0xffbee51c, 0xfb3c2e44,
0xfb67549c, 0xffbee544, 0x0, 0x3), at 0xfb498da0
  [3] nsSVGOuterSVGFrame::Paint(0x9f9854, 0x970fb0, 0x9d16f0, 0xffbee5b8, 0x2,
0x0), at 0xfb48b584
  [4] nsContainerFrame::PaintChild(0x9f96ac, 0x970fb0, 0x9d16f0, 0xffbee8a0,
0x9f9854, 0x2), at 0xfb173da8
  [5] nsContainerFrame::PaintChildren(0x9f96ac, 0x970fb0, 0x9d16f0, 0xffbee8a0,
0x2, 0x0), at 0xfb173c28
  [6] nsContainerFrame::Paint(0x9f96ac, 0x970fb0, 0xfb173bf0, 0xffbee8a0, 0x2,
0xfb65c584), at 0xfb173bd0
  [7] nsPageContentFrame::Paint(0x9f96ac, 0x970fb0, 0x9d16f0, 0xffbee8a0, 0x2,
0xfa9fa6cc), at 0xfb1e8308
  [8] PresShell::Paint(0x9b2c08, 0x9b0c50, 0x9d16f0, 0xffbee8a0, 0x9b2c40,
0xfb1e8280), at 0xfb1f75d0
=>[9] nsView::Paint(this = ???, rc = CLASS, rect = STRUCT, aPaintFlags = ???,
aResult = ???) (optimized), at 0xfb90b8b4 (line ~278) in "nsView.cpp"
  [10] nsViewManager::RenderDisplayListElement(this = ???, element = ???, aRC =
CLASS) (optimized), at 0xfb918160 (line ~1190) in "nsViewManager.cpp"
  [11] nsViewManager::RenderViews(this = ???, aRootView = ???, aRC = CLASS,
aRect = STRUCT, aResult = ???) (optimized), at 0xfb917fd0 (line ~1138) in
"nsViewManager.cpp"
  [12] nsViewManager::Display(this = ???, aView = ???, aX = ???, aY = ???,
aClipRect = STRUCT) (optimized), at 0xfb91c1f4 (line ~3066) in
"nsViewManager.cpp"
dbx: warning: can't find file
"/shared/bigtmp2/mozilla/2002-05-31-08-trunk/objdir_ws7ea2_gtk_svg/layout/build/nsSimplePageSequence.o"
  [13] nsSimplePageSequenceFrame::PrintNextPage(0x9f9340, 0x970fb0, 0x0,
0x9f9498, 0x80000000, 0x3952), at 0xfb213b74
dbx: warning: can't find file
"/shared/bigtmp2/mozilla/2002-05-31-08-trunk/objdir_ws7ea2_gtk_svg/content/build/nsDocumentViewer.o"
  [14] DocumentViewerImpl::PrintPage(0x71c9a8, 0x970fb0, 0x1, 0x94a520, 0x0,
0x2), at 0xfc19e8fc
  [15] nsPagePrintTimer::Notify(0xbdda28, 0xbe9d20, 0x3ef774, 0xa8, 0xff100958,
0x970fb0), at 0xfc1bcd68
dbx: warning: can't find file
"/shared/bigtmp2/mozilla/2002-05-31-08-trunk/objdir_ws7ea2_gtk_svg/xpcom/build/nsTimerImpl.o"
  [16] nsTimerImpl::Fire(0xbe9d20, 0x2c9c, 0x1, 0xff1ed1b8, 0xff1df0e8, 0x2c00),
at 0xff0fdd40
  [17] handleTimerEvent(0xbe4510, 0xff1ed1b0, 0xe12c8, 0xfef7d4a8, 0x0,
0xff1df0e8), at 0xff0fdfac
dbx: warning: can't find file
"/shared/bigtmp2/mozilla/2002-05-31-08-trunk/objdir_ws7ea2_gtk_svg/xpcom/build/plevent.o"
  [18] PL_HandleEvent(0xbe4510, 0xff0fde14, 0xbf2154, 0x1, 0x0, 0xbe4510), at
0xff0f3a80
  [19] PL_ProcessPendingEvents(0x97900, 0x155390, 0x4, 0xff1ca810, 0xff1ca7f8,
0xff1ece60), at 0xff0f38b8
dbx: warning: can't find file
"/shared/bigtmp2/mozilla/2002-05-31-08-trunk/objdir_ws7ea2_gtk_svg/xpcom/build/nsEventQueue.o"
  [20] nsEventQueueImpl::ProcessPendingEvents(0x9e718, 0x0, 0xe95bc, 0x0, 0x0,
0x80004000), at 0xff0f5b8c
  [21] event_processor_callback(data = ???, source = ???, condition = ???)
(optimized), at 0xfd4a4a94 (line ~184) in "nsAppShell.cpp"
  [22] our_gdk_io_invoke(source = ???, condition = ???, data = ???) (optimized),
at 0xfd4a4654 (line ~76) in "nsAppShell.cpp"
dbx: warning: can't find file
"/home/gisburn/package-builds/glib/glib-1.2.8/objdir/giounix.lo"
  [23] g_io_unix_dispatch(0x25dd48, 0xffbef008, 0x22e6b0, 0x0, 0x0, 0xffbeef70),
at 0xfe9b2dc8
dbx: warning: can't find file
"/home/gisburn/package-builds/glib/glib-1.2.8/objdir/gmain.lo"
  [24] g_main_dispatch(0xffbef008, 0xea600, 0x1, 0x0, 0xfeb5155b, 0x378), at
0xfe9b6dc8
  [25] g_main_iterate(0x1, 0x1, 0x5, 0xff3e4270, 0xfd497935, 0x18), at
0xfe9b7bcc
  [26] g_main_run(0x11d838, 0x11d838, 0x1, 0xfd511d18, 0xfd511d1c, 0xd553c), at
0xfe9b7f64
dbx: warning: can't find file
"/home/gisburn/package-builds/gtk+/gtk+-1.2.8/objdir/gtk/gtkmain.lo"
  [27] gtk_main(0x9e718, 0x130c20, 0xffbef0e4, 0xffbef0e8, 0x0, 0xfd4a5004), at
0xfecd60a0
  [28] nsAppShell::Run(this = ???) (optimized), at 0xfd4a4f58 (line ~332) in
"nsAppShell.cpp"
  [29] nsAppShellService::Run(this = ???) (optimized), at 0xfd5b1648 (line ~450)
in "nsAppShellService.cpp"
  [30] main1(argc = ???, argv = ???, nativeApp = ???) (optimized), at 0x19d98
(line ~1456) in "nsAppRunner.cpp"
  [31] main(argc = ???, argv = ???) (optimized), at 0x1a780 (line ~1805) in
"nsAppRunner.cpp"
-- snip --

Comment 1

[Marco Perez [:mpk]]

Updated the test URL (link was broken).

Comment 2

[Jonathan Watt [:jwatt]]

Mass reassign of SVG bugs that aren't currently being worked on by Alex to
[e-mail]. If you think someone should be assigned to your bug you can
join the #svg channel on mozilla.org's IRC server ( irc://irc.mozilla.org/svg )
where you can try to convince one of the SVG hackers to work on it. We aren't
always there, so if you don't get a response straight away please try again later. 

Comment 3

[Jonathan Watt [:jwatt]]

nsSVGRenderingContext is dead.