207272 - crash in imgContainerGIF::Notify on some gif files

Status: RESOLVED WORKSFORME

(Core :: Graphics: ImageLib, defect)

Description

[Arwed von Merkatz]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686) Gecko/0 Galeon/1.3.4
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4b) Gecko/20030526

mozilla segfaults in imgContainerGIF::Notify when i try to view the image file
linked to in the url (and a lot of other gif files)
disabling gif animations in galeon fixes it for galeon (disabling it with a
user_pref in user.js or prefs.js for mozilla doesn't work, mozilla still crashes)

Reproducible: Always

Steps to Reproduce:
1. start mozilla
2. go to the above url

Actual Results:  
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 16384 (LWP 3452)]
0x411b3b08 in imgContainerGIF::Notify(nsITimer*) ()
   from /usr/lib/mozilla-1.4b/components/libimglib2.so
(gdb) bt
#0  0x411b3b08 in imgContainerGIF::Notify(nsITimer*) ()
   from /usr/lib/mozilla-1.4b/components/libimglib2.so
#1  0x40bdddff in nsTimerImpl::Fire() ()
   from /usr/lib/mozilla-1.4b//libxpcom.so
#2  0x40bddea4 in handleTimerEvent(TimerEventType*) ()
   from /usr/lib/mozilla-1.4b//libxpcom.so
#3  0x40bd8f27 in PL_HandleEvent () from /usr/lib/mozilla-1.4b//libxpcom.so
#4  0x40bd8e34 in PL_ProcessPendingEvents ()
   from /usr/lib/mozilla-1.4b//libxpcom.so
#5  0x40bda295 in nsEventQueueImpl::ProcessPendingEvents() ()
   from /usr/lib/mozilla-1.4b//libxpcom.so
#6  0x41312f05 in event_processor_callback(_GIOChannel*, GIOCondition, void*)
    () from /usr/lib/mozilla-1.4b/components/libwidget_gtk2.so
#7  0x40519ead in g_io_unix_dispatch () from /usr/lib/libglib-2.0.so.0
#8  0x404fa2a5 in g_main_dispatch () from /usr/lib/libglib-2.0.so.0
#9  0x404f86dc in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#10 0x404fa725 in g_main_context_iterate () from /usr/lib/libglib-2.0.so.0
#11 0x404f8caf in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#12 0x4021b03f in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#13 0x41312996 in nsAppShell::Run() ()
   from /usr/lib/mozilla-1.4b/components/libwidget_gtk2.so
#14 0x41afb2e4 in nsAppShellService::Run() ()
   from /usr/lib/mozilla-1.4b/components/libnsappshell.so
#15 0x08056a05 in main1(int, char**, nsISupports*) ()
#16 0x08054dc9 in main ()
#17 0x4063abe7 in __libc_start_main () from /lib/libc.so.6



this happens with a mozilla compiled with gcc 3.3 with the following options:
./configure --prefix=/usr --enable-xft --enable-toolkit-gtk2
--enable-default-toolkit=gtk2  --enable-freetype2 --with-system-zlib
--with-system-png --with-system-jpeg --with-system-mng

Comment 1

[Chris Casciano]

WFM OS X 2003052307 - trunk nightly

Comment 2

[Dan Backes]

wfm 2003052708 winXP

Comment 3

[Jesiah S]

WFM LInux 2003052709 and todays CVS w/GTK2/XFT gcc 2.95.3

Comment 4

[Andrew Schultz]

worksforme with linux trunk 20030526, CVS/gtk2 and 1.3

> disabling gif animations in galeon fixes it for galeon

the gif in the URL is not animated, right?

Comment 5

[Arwed von Merkatz]

it's not an animated gif, that's what confuses me a bit, i have some gif files
on my hard disk it loads, others that crash mozilla (all of them not animated)
i did some testing with those, mozilla crashes with all gifs that are gif89a
(according to 'file <file.gif>'), it works with all gifs that are gif87a. I'll
attach a sample of each type.

Comment 6

[Arwed von Merkatz]

Attachment: gif89a, crashes mozilla

Comment 7

[Arwed von Merkatz]

Attachment: gif87a, works

Comment 8

[Jim Dunn]

I couldn't reproduce it either...
gcc 3.2, xft, gtk2...
Can you think of anything else that you might have in your environment
that might cause this?
-Special graphics card?
-Special profile (did you try to create a new profile and see if that crashes?)

Does it only happen on optimize builds?  (any special flags)
What about with --enable-debug, do you still crash?  If so can you post a stack
that has line numbers?

Comment 9

[Arwed von Merkatz]

graphics card is a nvidia riva tnt2, using the nvidia binary drivers, i just
disabled the render extension to see if the render acceleration causes it (it
caused some crashes before), but that didn't help.
i also removed my ~/.mozilla directory completely and tried to start, didn't
help either.

I'll try compiling without optimizations and --enable-debug soon.

Comment 10

[David Balch]

WFM Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040113

Hi Arwed,

Are you still seeing this crash with current builds? If not please mark this bug
as WORKSFORME.

Cheers

Comment 11

[Arwed von Merkatz]

Totally forgot about this, works fine in 1.6 here.