Firefox 1.5RC3 crashes when trying to print a page [@ lexpsnt3.dll - CompositeBitsInMemory ][@ IIAAE1DD.dll - CompositeBitsInMemory ]

RESOLVED FIXED

Status

Core Graveyard
GFX: Win32
--
critical
RESOLVED FIXED
12 years ago
8 years ago

People

(Reporter: jgoldsti, Unassigned)

Tracking

({crash, fixed1.8.0.2, fixed1.8.1})

Trunk
x86
Windows XP
crash, fixed1.8.0.2, fixed1.8.1
Bug Flags:
blocking1.8.0.2 +

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: DUPEME[nvn-dl], crash signature, URL)

Attachments

(4 attachments)

(Reporter)

Description

12 years ago
User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051111 (CK-IBM) Firefox/1.5
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051111 (CK-IBM) Firefox/1.5

I tried to print a page from a website onto my Lexmark Optra R+ Postscript printer and Firefox crashed. This does not happen with IE6.1.This has now happened on two different websites.

Reproducible: Always

Steps to Reproduce:
1.Open webiste
2.Print page
3.

Actual Results:  
Firefox crashes 

Expected Results:  
Page prints

This first happened on a Better business bureau website.

Comment 1

12 years ago
Could you install with talkback and get a talkback ID for the crash? http://kb.mozillazine.org/Talkback
Keywords: crash

Comment 2

12 years ago
probably a dupe of the bad hp printer drivers crash gecko bugs. but i'd need either a talkback report or windbg output to be sure.
Keywords: stackwanted
Whiteboard: DUPEME
(Reporter)

Comment 3

12 years ago
I recreated the problem with talkback installed. The talkback ID is: 
TB12141531Z.

Let me know if you need anything else to get this debugged.  By the way, I'll try printing to an HP officejet and see if it acts up with another printer (it crashed when trying to print to a Lexmark Optra R+ Poscript level 2 driver).
(Reporter)

Comment 4

12 years ago
I did some more testing and Firefox only crashes with the Lexmark Optra R+ Postscript 2 driver.  It does not crash with the PCL or Postscript 3 drivers or when printing to an HP Officejet 4200 attached to the same machine. IE 6.1 does not have problems with this driver.

Comment 5

12 years ago
Stack Signature	 lexpsnt3.dll + 0x87e3 (0x01f887e3) e5be528b
Product ID	Firefox15
Build ID	2005111116
Trigger Time	2005-11-22 10:43:03.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	lexpsnt3.dll + (000087e3)
URL visited	http://dsl.sbc.yahoo.com/
User Comments	Tried to print this url. Same problem occurs with other urls as well.
Since Last Crash	42531 sec
Total Uptime	42531 sec
Trigger Reason	Access violation
Source File, Line No.	N/A
Stack Trace 	
lexpsnt3.dll + 0x87e3 (0x01f887e3)
lexpsnt3.dll + 0x89c5 (0x01f889c5)
lexpsnt3.dll + 0x8ab5 (0x01f88ab5)
GDI32.dll + 0x18751 (0x77f28751)
USER32.dll + 0x203fb (0x77d603fb)
ntdll.dll + 0xeae3 (0x7c90eae3)
CompositeBitsInMemory  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/gfx/src/windows/nsImageWin.cpp, line 2050]
nsImageWin::Draw  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/gfx/src/windows/nsImageWin.cpp, line 577]
nsRenderingContextImpl::DrawImage  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/gfx/src/shared/nsRenderingContextImpl.cpp, line 378]
nsImageFrame::Paint  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsImageFrame.cpp, line 1403]
nsContainerFrame::PaintChild  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsContainerFrame.cpp, line 283]
nsContainerFrame::PaintChildren  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsContainerFrame.cpp, line 228]
nsHTMLContainerFrame::PaintDecorationsAndChildren  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsHTMLContainerFrame.cpp, line 138]
nsInlineFrame::Paint  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsInlineFrame.cpp, line 327]
nsContainerFrame::PaintChild  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsContainerFrame.cpp, line 283]
nsBlockFrame::PaintChild  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/tables/../generic\nsBlockFrame.h, line 287]
nsBlockFrame::PaintChildren  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsBlockFrame.cpp, line 6441]
nsHTMLContainerFrame::PaintDecorationsAndChildren  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsHTMLContainerFrame.cpp, line 138]
nsBlockFrame::Paint  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsBlockFrame.cpp, line 6268]
nsContainerFrame::PaintChild  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsContainerFrame.cpp, line 283]
nsContainerFrame::PaintChildren  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsContainerFrame.cpp, line 228]
nsTableCellFrame::Paint  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/tables/nsTableCellFrame.cpp, line 440]
nsContainerFrame::PaintChild  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsContainerFrame.cpp, line 283]
nsContainerFrame::PaintChildren  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsContainerFrame.cpp, line 228]
nsTableRowFrame::Paint  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/tables/nsTableRowFrame.cpp, line 561]
nsContainerFrame::PaintChild  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsContainerFrame.cpp, line 283]
nsContainerFrame::PaintChildren  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsContainerFrame.cpp, line 228]
...

related bugs: 251976, 273998 and 303845?
Summary: Firefox 1.5RC3 crashes when trying to print a page → Firefox 1.5RC3 crashes when trying to print a page [@ lexpsnt3.dll - CompositeBitsInMemory ]

Comment 6

12 years ago
*** Bug 251976 has been marked as a duplicate of this bug. ***

Comment 7

12 years ago
*** Bug 303845 has been marked as a duplicate of this bug. ***

Comment 8

12 years ago
*** Bug 273998 has been marked as a duplicate of this bug. ***

Comment 9

12 years ago
the fix for this and the fix for the hp bug will be the same, lots of SEH code around anything that could possibly call into a buggy printer driver.
Assignee: nobody → win32
Component: General → GFX: Win32
Keywords: stackwanted
Product: Firefox → Core
QA Contact: general → ian
Version: unspecified → Trunk
(Reporter)

Comment 10

12 years ago
I found the same problem with the IBM 1312 Postscript 3 drivers (I believe they are developed by Lexmark).  The talkback record is TB12344716G.

Comment 11

12 years ago
Incident ID: 12344716
Stack Signature	IIAAE1DD.dll + 0xe02a (0x0343e02a) 8e247a0c
Product ID	Firefox15
Build ID	2005111116
Trigger Time	2005-11-28 07:23:27.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	IIAAE1DD.dll + (0000e02a)
URL visited	
User Comments	Firefox crashed when trying to print using the IBM 1312 PS3 driver.
Since Last Crash	8409 sec
Total Uptime	66202 sec
Trigger Reason	Access violation
Source File, Line No.	N/A
Stack Trace 	
IIAAE1DD.dll + 0xe02a (0x0343e02a)
IIAAE1DD.dll + 0xe20c (0x0343e20c)
IIAAE1DD.dll + 0xe2fc (0x0343e2fc)
GDI32.dll + 0x18751 (0x77f28751)
USER32.dll + 0x203fb (0x77d603fb)
ntdll.dll + 0xeae3 (0x7c90eae3)
CompositeBitsInMemory  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/gfx/src/windows/nsImageWin.cpp, line 2050]
nsImageWin::Draw  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/gfx/src/windows/nsImageWin.cpp, line 577]
nsRenderingContextImpl::DrawImage  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/gfx/src/shared/nsRenderingContextImpl.cpp, line 378]
nsImageFrame::Paint  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsImageFrame.cpp, line 1403]
nsContainerFrame::PaintChild  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsContainerFrame.cpp, line 283]
nsBlockFrame::PaintChild  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/tables/../generic\nsBlockFrame.h, line 287]
nsBlockFrame::PaintChildren  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsBlockFrame.cpp, line 6441]
nsHTMLContainerFrame::PaintDecorationsAndChildren  [c:/builds/tinderbox/Fx-Mozilla1.8/WINNT_5.2_Depend/mozilla/layout/generic/nsHTMLContainerFrame.cpp, line 138]
...
Summary: Firefox 1.5RC3 crashes when trying to print a page [@ lexpsnt3.dll - CompositeBitsInMemory ] → Firefox 1.5RC3 crashes when trying to print a page [@ lexpsnt3.dll - CompositeBitsInMemory ][@ IIAAE1DD.dll - CompositeBitsInMemory ]

Comment 12

12 years ago
*** Bug 318183 has been marked as a duplicate of this bug. ***

Comment 13

12 years ago
*** Bug 322188 has been marked as a duplicate of this bug. ***

Comment 14

11 years ago
(In reply to comment #0)
> User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8)
> Gecko/20051111 (CK-IBM) Firefox/1.5
> Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8)
> Gecko/20051111 (CK-IBM) Firefox/1.5
> 
> I tried to print a page from a website onto my Lexmark Optra R+ Postscript
> printer and Firefox crashed. This does not happen with IE6.1.This has now
> happened on two different websites.
> 
> Reproducible: Always
> 
> Steps to Reproduce:
> 1.Open webiste
> 2.Print page
> 3.
> 
> Actual Results:  
> Firefox crashes 
> 
> Expected Results:  
> Page prints
> 
> This first happened on a Better business bureau website.
> 

Comment 15

11 years ago
I also noticed crashes when trying to print at least a dozen pages with Firefox 1.5 and a Lexmark X422 MFP PostScript driver. No other program has any problem with this and the pages do print fine with IE 6.x. Now after reading here I will try to print with the PCL dirver in the future...

Comment 16

11 years ago
Are these drivers that ship with Windows or do I have to go download them from Lexmark?

Comment 17

11 years ago
You'd probably be best off getting the drivers from Lexmark. For me at least, on earlier advice while trying to track down this bug, I had switched to the Lexmark drivers. And I still have the problem in both firefox and thunderbird.

Comment 18

11 years ago
What should I install to recreate?

 	 	MPWNXPAE.exe  	 	 	 	Version 1.5
					
	Postscript Level 3 Driver for Microsoft Windows XP and Server 2003 				 File Information
		MPLX2K2E.EXE 				Version 7.4.1
					
	Postscript Driver for Windows 2000, XP and Server 2003

Comment 19

11 years ago
Created attachment 212225 [details]
Image for testcase

Comment 20

11 years ago
Created attachment 212226 [details]
Testcase for crash

We've done lots of research on this and we have a testcase.

It has to do with absolutely postioning things to a very exact position.

It appears to be a driver bug combined with an optimizer bug since if I unoptimize Firefox 1.5 or use VC8, the problem doesn't happen.

We are continuing to research the problem.

Comment 21

11 years ago
Created attachment 212940 [details] [diff] [review]
Workaround for problem

Opt and nonopt were doing different precision in some transform computations.

By adding a function call in the middle, we workaround the problem.

Comment 22

11 years ago
This is a blocker request. This bug is causing major headaches for our 1.5.0.1 rollout inside of IBM.

I need this in 1.5.0.2 so I can make many thousands of IBM employees happy.
Status: UNCONFIRMED → NEW
Ever confirmed: true
Flags: blocking1.8.0.2+

Comment 23

11 years ago
Created attachment 212943 [details] [diff] [review]
Proper patch that uses compiler version

Using MSC_VER so this only happens on Windows and VC6

Updated

11 years ago
Attachment #212943 - Flags: superreview?(roc)
Attachment #212943 - Flags: review?(roc)
Comment on attachment 212943 [details] [diff] [review]
Proper patch that uses compiler version

The risk is about zero.
Attachment #212943 - Flags: superreview?(roc)
Attachment #212943 - Flags: superreview+
Attachment #212943 - Flags: review?(roc)
Attachment #212943 - Flags: review+
Attachment #212943 - Flags: approval-branch-1.8.1+

Comment 25

11 years ago
Comment on attachment 212943 [details] [diff] [review]
Proper patch that uses compiler version

I need this on 1.8.0.2 as well
Attachment #212943 - Flags: approval1.8.0.2?
Please land this on trunk and 1.8 branch so the fix can be verified before it's approved for the 1.8.0 update branch.

Comment 27

11 years ago
roc, is there any benefit to having this on the trunk?
Keywords: fixed1.8.1
We can land it on the trunk, but I don't think you can currently build the trunk with VC6 anymore (because VC6 can't build cairo reliably). So it won't really have any effect.
Comment on attachment 212943 [details] [diff] [review]
Proper patch that uses compiler version

approved for 1.8.0 branch, a=dveditz for drivers
Attachment #212943 - Flags: approval1.8.0.2? → approval1.8.0.2+
fix checked into 1.8.0 branch
Keywords: fixed1.8.0.2

Comment 31

11 years ago
I verified this problem does not exist with VC8 so I am not landing this on the trunk.
Status: NEW → RESOLVED
Last Resolved: 11 years ago
Resolution: --- → FIXED
Could someone at IBM grab a recent nightly 1.8.0 build and verify that the problem has been fixed?  Thanks.
Whiteboard: DUPEME → DUPEME[nvn-dl]

Comment 33

11 years ago
(In reply to comment #32)
> Could someone at IBM grab a recent nightly 1.8.0 build and verify that the
> problem has been fixed?  Thanks.
> 

I've tried but the problem seems still here... Can you point out a specific build to download?

Comment 34

11 years ago
Builds from here:

http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-mozilla1.8.0/

Comment 35

11 years ago
ARGH. This specific problem is fixed. But there is a second driver specific crash. I'm investigating now.

Comment 36

11 years ago
I've opened

https://bugzilla.mozilla.org/show_bug.cgi?id=329299

for the other problem.

I have verified this specific problem is fixed with a downloaded build

The other problem is different.
Can someone who has access to the buggy printer driver please test the following build, and see if the crash happens or not?

<http://www.mcsmurf.de/mozilla/firefox-trunk-20060821-print.zip>

I have written a patch which I think should fix this problem, but I don't have
access to such a printer to test it.  Thanks!
Product: Core → Core Graveyard
Crash Signature: [@ lexpsnt3.dll - CompositeBitsInMemory ] [@ IIAAE1DD.dll - CompositeBitsInMemory ]
You need to log in before you can comment on or make changes to this bug.