464451 - Crash in fbFetchPixel_a8r8g8b8 (pixman-access.c) when loading msdn on Windows XP

Status: RESOLVED DUPLICATE of bug 463301

(Core Graveyard :: GFX: Win32, defect)

Description

[Brad Lassey [:blassey] (use needinfo?)]

This crash has been happening over the last three days, whenever I go to msdn.

This may be related to bug 463301 

http://crash-stats.mozilla.com/report/index/389961db-06d1-4a03-876e-2d9c20081112?p=1

Output:
First-chance exception at 0x1024dc63 (xul.dll) in firefox.exe: 0xC0000005: Access violation reading location 0x16cefffc.
Unhandled exception at 0x1024dc63 (xul.dll) in firefox.exe: 0xC0000005: Access violation reading location 0x16cefffc.



Stack:
>	xul.dll!fbFetchPixel_a8r8g8b8(bits_image * pict=0x07d3e3a0, int offset=0xffffffff, int line=0x00000000)  Line 812 + 0x13 bytes	C
 	xul.dll!fbFetchTransformed_Bilinear_Pad(bits_image * pict=0x07d3e3a0, int width=0x00000000, unsigned int * buffer=0x00000000, unsigned int * mask=0x00000000, unsigned int maskBits=0xff000000, int affine=0x00000001, pixman_vector v={...}, pixman_vector unit={...})  Line 330	C
 	xul.dll!fbFetchTransformed(bits_image * pict=0x07d3e3a0, int x=0xffff8000, int y=0x00000000, int width=0x00000002, unsigned int * buffer=0x001285c4, unsigned int * mask=0x00000000, unsigned int maskBits=0xff000000)  Line 602 + 0x3b bytes	C
 	xul.dll!pixman_composite_rect_general_no_accessors(const _FbComposeData * data=0x00000000, void * src_buffer=0x001285c4, void * mask_buffer=0x001285cc, void * dest_buffer=0x001285d4, const int wide=0x00000000)  Line 490 + 0x2c bytes	C
 	xul.dll!pixman_composite_rect_general(const _FbComposeData * data=0x0012e5cc)  Line 589 + 0x8 bytes	C
 	xul.dll!pixman_image_composite_rect(pixman_op_t op=PIXMAN_OP_OVER, pixman_image * src=0x07d3e3a0, pixman_image * mask=0x00000000, pixman_image * dest=0x07d3e450, short src_x=0x0000, short src_y=0x0000, short mask_x=0x0000, short mask_y=0x0000, short dest_x=0x0000, short dest_y=0x0000, unsigned short width=0x0002, unsigned short height=0x0019)  Line 1334 + 0x13 bytes	C
 	xul.dll!pixman_walk_composite_region(pixman_op_t op=PIXMAN_OP_OVER, pixman_image * pSrc=0x07d3e3a0, pixman_image * pMask=0x00000000, pixman_image * pDst=0x07d3e450, short xSrc=0x0000, short ySrc=0x0000, short xMask=0x0000, short yMask=0x0000, short xDst=0x0000, short yDst=0x0000, unsigned short width=0x0002, unsigned short height=0x0019, int srcRepeat=0x00000000, int maskRepeat=0x00000000, void (pixman_op_t, pixman_image *, pixman_image *, pixman_image *, short, short, short, short, short, short, unsigned short, unsigned short)* compositeRect=0x1023c5f0)  Line 1290	C
 	xul.dll!_moz_pixman_image_composite(pixman_op_t op=PIXMAN_OP_OVER, pixman_image * pSrc=0x00000000, pixman_image * pMask=0x00000000, pixman_image * pDst=0x07d3e450, short xSrc=0x0000, short ySrc=0x0000, short xMask=0x0000, short yMask=0x0000, short xDst=0x0000, short yDst=0x0000, unsigned short width=0x0002, unsigned short height=0x0019)  Line 1964 + 0x49 bytes	C
 	xul.dll!_cairo_image_surface_composite(_cairo_operator op=CAIRO_OPERATOR_OVER, _cairo_pattern * src_pattern=0x07894820, _cairo_pattern * mask_pattern=0x00000000, void * abstract_dst=0x090fb7a0, int src_x=0x00000000, int src_y=0x00000000, int mask_x=0x00000000, int mask_y=0x00000000, int dst_x=0x00000000, int dst_y=0x00000000, unsigned int width=0x00000002, unsigned int height=0x00000019)  Line 1005	C
 	xul.dll!_cairo_surface_composite(_cairo_operator op=CAIRO_OPERATOR_OVER, _cairo_pattern * src=0x07894820, _cairo_pattern * mask=0x00000000, _cairo_surface * dst=0x090fb7b0, int src_x=0x00000000, int src_y=0x00000000, int mask_x=0x00000000, int mask_y=0x00000000, int dst_x=0x00000000, int dst_y=0x00000000, unsigned int width=0x00000002, unsigned int height=0x00000019)  Line 1292 + 0x2e bytes	C
 	xul.dll!_cairo_surface_fallback_composite(_cairo_operator op=CAIRO_OPERATOR_OVER, _cairo_pattern * src=0x07894820, _cairo_pattern * mask=0x00000000, _cairo_surface * dst=0x067d4060, int src_x=0x00000000, int src_y=0x00000000, int mask_x=0x00000000, int mask_y=0x00000000, int dst_x=0x00000000, int dst_y=0x00000000, unsigned int width=0x00000002, unsigned int height=0x00000019)  Line 1108	C
 	xul.dll!_cairo_surface_composite(_cairo_operator op=CAIRO_OPERATOR_OVER, _cairo_pattern * src=0x07894820, _cairo_pattern * mask=0x00000000, _cairo_surface * dst=0x067d4070, int src_x=0x00000000, int src_y=0x00000000, int mask_x=0x00000000, int mask_y=0x00000000, int dst_x=0x00000000, int dst_y=0x00000000, unsigned int width=0x00000002, unsigned int height=0x00000019)  Line 1303 + 0x31 bytes	C
 	xul.dll!_composite_trap_region(_cairo_clip * clip=0x067d4990, _cairo_pattern * src=0x07894820, _cairo_operator op=CAIRO_OPERATOR_OVER, _cairo_surface * dst=0x00000000, _cairo_region * trap_region=0x0012ea54, _cairo_rectangle_int32 * extents=0x00000000)  Line 457 + 0x58 bytes	C
 	xul.dll!_clip_and_composite_trapezoids(_cairo_pattern * src=0x07894820, _cairo_operator op=CAIRO_OPERATOR_OVER, _cairo_surface * dst=0x067d4060, _cairo_traps * traps=0x0012eac0, _cairo_clip * clip=0x067d4990, _cairo_antialias antialias=CAIRO_ANTIALIAS_DEFAULT)  Line 643 + 0x18 bytes	C
 	xul.dll!_cairo_surface_fallback_fill(_cairo_surface * surface=0x067d4060, _cairo_operator op=CAIRO_OPERATOR_OVER, _cairo_pattern * source=0x07894820, _cairo_path_fixed * path=0x06205994, _cairo_fill_rule fill_rule=CAIRO_FILL_RULE_WINDING, double tolerance=0.10000000000000001, _cairo_antialias antialias=CAIRO_ANTIALIAS_DEFAULT)  Line 901	C
 	xul.dll!_cairo_surface_fill(_cairo_surface * surface=0x07894820, _cairo_operator op=CAIRO_OPERATOR_OVER, _cairo_pattern * source=0x0012eb7c, _cairo_path_fixed * path=0x06205994, _cairo_fill_rule fill_rule=CAIRO_FILL_RULE_WINDING, double tolerance=0.10000000000000001, _cairo_antialias antialias=CAIRO_ANTIALIAS_DEFAULT)  Line 1686 + 0x21 bytes	C
 	xul.dll!_cairo_gstate_fill(_cairo_gstate * gstate=0x067d4900, _cairo_path_fixed * path=0x06205994)  Line 1010 + 0x2d bytes	C
 	xul.dll!_moz_cairo_fill_preserve(_cairo * cr=0x06205800)  Line 2158 + 0x10 bytes	C
 	xul.dll!gfxContext::Fill()  Line 148 + 0x8 bytes	C++
 	xul.dll!nsThebesImage::Draw(gfxContext * aContext=0x0637d220, const gfxMatrix & aUserSpaceToImageSpace={...}, const gfxRect & aFill={...}, const nsMargin & aPadding={...}, const nsRect & aSubimage={...})  Line 667	C++
 	xul.dll!nsLayoutUtils::DrawImage(nsIRenderingContext * aRenderingContext=0x07910200, imgIContainer * aImage=0x078945e0, const nsRect & aDest={...}, const nsRect & aFill={...}, const nsPoint & aAnchor={...}, const nsRect & aDirty={...})  Line 2782	C++
 	xul.dll!nsCSSRendering::PaintBackgroundWithSC(nsPresContext * aPresContext=0x04016c00, nsIRenderingContext & aRenderingContext={...}, nsIFrame * aForFrame=0x0936d17c, const nsRect & aDirtyRect={...}, const nsRect & aBorderArea={...}, const nsStyleBackground & aColor={...}, const nsStyleBorder & aBorder={...}, int aUsePrintSettings=0x078945e0, nsRect * aBGClipRect=0x00000000)  Line 1535	C++
 	xul.dll!nsCSSRendering::PaintBackground(nsPresContext * aPresContext=0x04016c00, nsIRenderingContext & aRenderingContext={...}, nsIFrame * aForFrame=0x0936d17c, const nsRect & aDirtyRect={...}, const nsRect & aBorderArea={...}, int aUsePrintSettings=0x00000001, nsRect * aBGClipRect=0x00000000)  Line 1180 + 0x1e bytes	C++
 	xul.dll!nsDisplayBackground::Paint(nsDisplayListBuilder * aBuilder=0x0012f308, nsIRenderingContext * aCtx=0x07910200, const nsRect & aDirtyRect={...})  Line 558 + 0x48 bytes	C++
 	xul.dll!nsDisplayList::Paint(nsDisplayListBuilder * aBuilder=0x0012f308, nsIRenderingContext * aCtx=0x07910200, const nsRect & aDirtyRect={...})  Line 311 + 0x13 bytes	C++
 	xul.dll!nsDisplayClip::Paint(nsDisplayListBuilder * aBuilder=0x0012f308, nsIRenderingContext * aCtx=0x07910200, const nsRect & aDirtyRect={...})  Line 906	C++
 	xul.dll!nsDisplayList::Paint(nsDisplayListBuilder * aBuilder=0x0012f308, nsIRenderingContext * aCtx=0x07910200, const nsRect & aDirtyRect={...})  Line 311 + 0x13 bytes	C++
 	xul.dll!nsLayoutUtils::PaintFrame(nsIRenderingContext * aRenderingContext=0x07910200, nsIFrame * aFrame=0x054716dc, const nsRegion & aDirtyRegion={...}, unsigned int aBackground=0xffffffff)  Line 1141	C++
 	xul.dll!PresShell::Paint(nsIView * aView=0x06adb520, nsIRenderingContext * aRenderingContext=0x07910200, const nsRegion & aDirtyRegion={...})  Line 5418 + 0xf bytes	C++
 	xul.dll!nsViewManager::RenderViews(nsView * aView=0x06f0f480, nsIRenderingContext & aRC={...}, const nsRegion & aRegion={...})  Line 627	C++
 	xul.dll!nsViewManager::Refresh(nsView * aView=0x06f0f480, nsIRenderingContext * aContext=0x00000036, nsIRegion * aRegion=0x0637d220, unsigned int aUpdateFlags=0x0012f6f0)  Line 514	C++
 	xul.dll!nsViewManager::DispatchEvent(nsGUIEvent * aEvent=0x0012f784, nsEventStatus * aStatus=0x0012f708)  + 0x200992 bytes	C++
 	xul.dll!HandleEvent(nsGUIEvent * aEvent=0x0012f784)  Line 170	C++
 	xul.dll!nsWindow::DispatchEvent(nsGUIEvent * event=0x0012f784, nsEventStatus & aStatus=nsEventStatus_eIgnore)  Line 955 + 0x3 bytes	C++
 	xul.dll!nsWindow::DispatchWindowEvent(nsGUIEvent * event=0x0012f784, nsEventStatus & aStatus=nsEventStatus_eIgnore)  Line 981	C++
 	xul.dll!__alldvrm()  + 0xafbcc bytes	C++
 	xul.dll!nsWindow::ProcessMessage(unsigned int msg=0x0000000f, unsigned int wParam=0x00000000, long lParam=0x00000000, long * aRetValue=0x0012fa54)  Line 4301 + 0xb bytes	C++
 	xul.dll!nsWindow::WindowProc(HWND__ * hWnd=0x00070510, unsigned int msg=0x0000000f, unsigned int wParam=0x00000000, long lParam=0x00000000)  Line 1165 + 0x15 bytes	C++
 	user32.dll!7e418734() 	
 	[Frames below may be incorrect and/or missing, no symbols loaded for user32.dll]	
 	user32.dll!7e418816() 	
 	user32.dll!7e428ea0() 	
 	user32.dll!7e428eec() 	
 	ntdll.dll!7c90e453() 	
 	user32.dll!7e4194d2() 	
 	user32.dll!7e428f10() 	
 	user32.dll!7e419402() 	
 	user32.dll!7e418a10() 	
 	xul.dll!nsAppShell::ProcessNextNativeEvent(int mayWait=0x00000000)  Line 149 + 0xb bytes	C++
 	xul.dll!nsBaseAppShell::OnProcessNextEvent(nsIThreadInternal * thr=0x00715330, int mayWait=0x00000001, unsigned int recursionDepth=0x00000000)  Line 278 + 0x27 bytes	C++
 	xul.dll!nsThread::ProcessNextEvent(int mayWait=0x00000001, int * result=0x0012fca8)  Line 501	C++
 	xul.dll!nsBaseAppShell::Run()  Line 169	C++
 	xul.dll!nsAppStartup::Run()  Line 193	C++
 	xul.dll!XRE_main(int argc=, char * * argv=, const nsXREAppData * aAppData=)  Line 3267	C++
 	xul.dll!nsLocalFile::GetParent(nsIFile * * aParent=0x10195f76)  Line 2207 + 0x94 bytes	C++
 	xul.dll!nsCOMPtr_base::~nsCOMPtr_base()  Line 82	C++
 	firefox.exe!wmain(int argc=0x00000001, wchar_t * * argv=0x00734040)  Line 87 + 0xe6 bytes	C++
 	firefox.exe!__tmainCRTStartup()  Line 591 + 0x19 bytes	C
 	kernel32.dll!7c817067()

Comment 1

[Matthias Versen [:Matti]]

should be a dupe of bug 463301