Closed Bug 1682847 Opened 3 years ago Closed 2 years ago

Crash in [@ various | nsBufferedInputStream::ReadSegments]

Categories

(Core :: Graphics: ImageLib, defect)

Product:
Core
Component:
Graphics: ImageLib
Type:
defect

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: sg, Unassigned)

Details

(Keywords: crash)

Crash Data

Crash report: https://crash-stats.mozilla.org/report/index/43cc8e72-671f-4a0e-abf0-82a380201017

Reason: EXCEPTION_ACCESS_VIOLATION_READ

Top 10 frames of crashing thread:

0 vcruntime140.dll vcruntime140.dll@0xd0a0 
1 xul.dll nsBufferedInputStream::ReadSegments netwerk/base/nsBufferedStreams.cpp:446
2 xul.dll xul.dll@0x9db43a 
3 xul.dll mozilla::image::RasterImage::OnImageDataAvailable image/RasterImage.cpp:992
4 xul.dll imgRequest::OnDataAvailable image/imgRequest.cpp:1070
5 xul.dll ProxyListener::OnDataAvailable image/imgLoader.cpp:2881
6 xul.dll nsBaseChannel::OnDataAvailable netwerk/base/nsBaseChannel.cpp:873
7 xul.dll nsInputStreamPump::OnInputStreamReady netwerk/base/nsInputStreamPump.cpp:393
8 xul.dll nsBufferedInputStream::OnInputStreamReady netwerk/base/nsBufferedStreams.cpp:717
9 xul.dll mozilla::dom::BlobURLInputStream::OnInputStreamReady dom/file/uri/BlobURLInputStream.cpp:268

Interestingly, on Windows the last report was for 83.0b3, but on Linux there are still crash reports in Nightly, e.g. https://crash-stats.mozilla.org/report/index/37775419-dd5a-48d8-8dd4-cc4ab0201216

Andrew, Timothy, this looks like it comes from ImageLib, although perhaps it is just getting passed a buggy input stream and isn't really at fault. Do you know who would be well placed to investigate this further?

Severity: -- → S3
Flags: needinfo?(tnikkel)
Flags: needinfo?(aosmond)

The fact most of the crashes come from blobs makes me think the problem is outside imagelib.

Flags: needinfo?(tnikkel)
Crash Signature: [@ vcruntime140.dll | nsBufferedInputStream::ReadSegments] [@ libc.so.6@0x15a02f | nsBufferedInputStream::ReadSegments] [@ libc.so.6@0x15a03f | nsBufferedInputStream::ReadSegments] [@ libc.so.6@0x159f6f | nsBufferedInputStream::ReadSegments] [@ libc.s… → [@ mozilla::detail::MutexImpl::tryLock | nsBufferedInputStream::ReadSegments ] [@ vcruntime140.dll | nsBufferedInputStream::ReadSegments] [@ libc.so.6@0x15a02f | nsBufferedInputStream::ReadSegments] [@ libc.so.6@0x15a03f | nsBufferedInputStream::ReadSe…
Crash Signature: nsBufferedInputStream::ReadSegments] [@ libc.so.6@0x159f6f | nsBufferedInputStream::ReadSegments] [@ libc.so@0x1aa2c | nsBufferedInputStream::ReadSegments] [@ libc.so@0x1de00 | nsBufferedInputStream::ReadSegments] → nsBufferedInputStream::ReadSegments] [@ libc.so.6@0x159f6f | nsBufferedInputStream::ReadSegments] [@ libc.so@0x1aa2c | nsBufferedInputStream::ReadSegments] [@ libc.so@0x1de00 | nsBufferedInputStream::ReadSegments] [@ mozilla::detail::MutexImpl::lock …
Flags: needinfo?(aosmond)

Closing because no crashes reported for 12 weeks.

Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.