462895 - Large HTML textbox causes crash with certain GTK themes (Linux)

Status: RESOLVED INCOMPLETE

(Core :: Graphics, defect)

Description

[Jan de Mooij]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1b2pre) Gecko/20081028 Minefield/3.1b2pre
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1b2pre) Gecko/20081028 Minefield/3.1b2pre

The following HTML causes a crash for me on Ubuntu 8.10 with the New Wave theme:

<input size="9999999">

Reproducible: Always

Steps to Reproduce:
1. Open the page with Firefox 3 on Linux with New Wave theme.
2. 
3.
Actual Results:  
Firefox crashes hard


It doesn't crash on Windows or with most other GTK themes.

In the console it displays a message "Floating point exception"

Submitted crash report: http://crash-stats.mozilla.com/report/index/c3dd0ad9-a9dc-11dd-ba8a-001cc4e2bf68

Comment 1

[Jan de Mooij]

It doesn't crash with smaller input box btw, looks like it can't handle the large width.

Comment 2

[Matthias Versen [:Matti]]

libgdk crashes

0  	libgdk_pixbuf-2.0.so.0.1400.4  	libgdk_pixbuf-2.0.so.0.1400.4@0x119a1  	
1 	libgdk_pixbuf-2.0.so.0.1400.4 	libgdk_pixbuf-2.0.so.0.1400.4@0x12151 	
2 	libgdk_pixbuf-2.0.so.0.1400.4 	libgdk_pixbuf-2.0.so.0.1400.4@0xb9a8 	
3 	libpixmap.so 	libpixmap.so@0x4395 	
4 	libpixmap.so 	libpixmap.so@0x5327 	
5 	libpixmap.so 	libpixmap.so@0x1d15 	
6 	libpixmap.so 	libpixmap.so@0x2a38 	
7 	libgtk-x11-2.0.so.0.1400.4 	libgtk-x11-2.0.so.0.1400.4@0x1a316d 	
8 	libxul.so 	moz_gtk_entry_paint 	widget/src/gtk2/gtk2drawing.c:1578
9 	libxul.so 	moz_gtk_widget_paint 	widget/src/gtk2/gtk2drawing.c:3132
10 	libxul.so 	ThemeRenderer::NativeDraw 	widget/src/gtk2/nsNativeThemeGTK.cpp:651
11 	libxul.so 	NativeRendering 	gfx/thebes/src/gfxGdkNativeRenderer.cpp:67
12 	libxul.so 	cairo_draw_with_gdk 	gfx/thebes/src/cairo-xlib-utils.c:307
13 	libxul.so 	gfxGdkNativeRenderer::Draw 	gfx/thebes/src/gfxGdkNativeRenderer.cpp:110

Comment 3

[Alexander Sack]

which gtk themse are affected, which are not?

can you attach a simple testcase to this bug?

Comment 4

[Jan de Mooij]

(In reply to comment #3)
> which gtk themse are affected, which are not?
> 
> can you attach a simple testcase to this bug?
See the URL for the testcase. 

I can only reproduce it with the New Wave theme. As you can see in the crash report it crashes when calling a gtk function to draw the shadow.

Comment 5

[Jan de Mooij]

Attachment: Testcase

Adding testcase here

Comment 6

[Jan de Mooij]

Note that New Wave is available in the community-themes package in Ubuntu 8.10

Comment 7

[timeless]

eventually you're going to want to file a bug against gdk...

https://wiki.ubuntu.com/MozillaTeam/Bugs#Obtain a backtrace from an apport crash report (using gdb)

Comment 8

[Jesse Ruderman]

Attachment: stack trace from a debug build

Firefox trunk, debug build, Ubuntu 9.10, New Wave theme.

Comment 9

[Jesse Ruderman]

Attachment: bt full

Comment 10

[timeless]

Jesse, you want to install debug symbols for:
/usr/lib/libgdk_pixbuf-2.0.so.0
/usr/lib/gtk-2.0/2.10.0/engines/libpixmap.so
/usr/lib/libgtk-x11-2.0.so.0

Comment 11

[u279076]

Jan, does this still reproduce?

Comment 12

[u279076]

Closing this bug report due to lack of follow-up. If someone is able to reproduce this in a currently supported version of Firefox and a currently supported version of Linux then please reopen this bug report. Thanks.