408444 - Crash soon after loading www.mameworld.net/samples/ RtlpCoalesceFreeBlocks

Status: RESOLVED DUPLICATE of bug 408310

(Core :: Graphics: ImageLib, defect)

Description

[Yani (fr)]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9b3pre) Gecko/2007121415 Minefield/3.0b3pre
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9b3pre) Gecko/2007121415 Minefield/3.0b3pre

Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9b3pre) Gecko/2007121415 Minefield/3.0b3pre ID:2007121415

Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9b3pre) Gecko/2007121416 Minefield/3.0b3pre 

Right after I load the page at www.mameworld.net/samples/ , I got a crash.
Sometimes,it takes a few second to actually get the crash.

Reproducible: Always

Steps to Reproduce:
1. load the site
2. wait a short amont of time

Actual Results:  
firefox crashes

Expected Results:  
no crash

http://crash-stats.mozilla.com/report/index/fa933fca-aaac-11dc-a553-001a4bd43ed6

Comment 1

[Jesse Ruderman]

Crashes my Mac trunk debug build too.  The crash seems to be during cycle collection.

Comment 2

[Jesse Ruderman]

Attachment: Jesse's stack trace

Comment 3

[Jesse Ruderman]

Actually, looks like http://www.mameworld.net/samples/TOCFrame.htm is triggering random memory corruption.  It frequently causes an immediate crash, but can lead to a crash anywhere.

Comment 4

[Jesse Ruderman]

http://www.mameworld.net/samples/pics/galaga88.gif is what triggers the crash.  Shift+reloading it a few times usually crashes Firefox.

Comment 5

[Jesse Ruderman]

Attachment: galaga88.gif (triggers random memory corruption)

Comment 6

[Yani (fr)]

# 20071212_0908 crash
# 20071212_0851 no crash

Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9b3pre) Gecko/2007121209 Minefield/3.0b3pre ID:2007121209 --> crash

Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9b3pre) Gecko/2007121209 Minefield/3.0b3pre ID:2007121209 --> no crash

http://hourly-archive.localgho.st/win32/20071212_0908_checkins.html
related to Bug 403578  ?

Comment 7

[Yani (fr)]

(In reply to comment #5)
> Created an attachment (id=293242) [details]
> galaga88.gif (triggers random memory corruption)
> 

thanks for narrowing it this :)
so it is probably Bug 403578

Comment 8

[Robert Sayre]

Attachment: valgrind log

Comment 9

[Jesse Ruderman]

CCing Alfred Kayser, who fixed bug 403578.

Comment 10

[Alfred Kayser]

Actually this is a DUP of bug 408310.
With the patch that I submitted there, mozilla (seamonkey/firefox) doesn't crash on this image anymore.