52946 - Crash in nsImageGTK::DrawComposited

Status: VERIFIED DUPLICATE of bug 52275

(Core :: XUL, defect, P3)

Description

[Robert Ginda]

Install forumzilla from http://www.zapogee.com/forumzilla/
Restart mozilla, choose, Tasks->Forumzilla
Click on the forumzilla forum.

Mozilla crashes like this:

(gdb) frame 0
#0  0x41085732 in nsImageGTK::DrawComposited (this=0x8a3a798, 
    aContext=@0x8a74ab8, aSurface=0x82b8978, aX=309, aY=8, aWidth=0, aHeight=0)
    at nsImageGTK.cpp:727
727       PRBool flipBytes = 
(gdb) list 727
722
723       PRBool isLSB;
724       unsigned test = 1;
725       isLSB = (((char *)&test)[0]) ? 1 : 0;
726
727       PRBool flipBytes = 
728         ( isLSB && ximage->byte_order != LSBFirst) ||
729         (!isLSB && ximage->byte_order == LSBFirst);
730
731       if ((ximage->bits_per_pixel==32) &&
(gdb) p ximage
$2 = (XImage *) 0x0

Going directly to the urls being loaded <slash.zapogee.com> and
<http://slash.zapogee.com/fz.pl?op=navigation> does not cause the crash.

#0  0x41085732 in nsImageGTK::DrawComposited (this=0x8a3a798, 
    aContext=@0x8a74ab8, aSurface=0x82b8978, aX=309, aY=8, aWidth=0, aHeight=0)
    at nsImageGTK.cpp:727
#1  0x41084a39 in nsImageGTK::Draw (this=0x8a3a798, aContext=@0x8a74ab8, 
    aSurface=0x82b8978, aX=309, aY=8, aWidth=0, aHeight=0)
    at nsImageGTK.cpp:905
#2  0x4108b3a2 in nsRenderingContextGTK::DrawImage (this=0x8a74ab8, 
    aImage=0x8a3a798, aX=0, aY=0, aWidth=1, aHeight=1)
    at nsRenderingContextGTK.cpp:1498
#3  0x4108b305 in nsRenderingContextGTK::DrawImage (this=0x8a74ab8, 
    aImage=0x8a3a798, aRect=@0xbfffe298) at nsRenderingContextGTK.cpp:1467
#4  0x4177ca65 in nsImageFrame::Paint (this=0x8a68fdc, aPresContext=0x8890498, 
    aRenderingContext=@0x8a74ab8, aDirtyRect=@0xbfffe304, 
    aWhichLayer=eFramePaintLayer_Overlay) at nsImageFrame.cpp:647
#5  0x41757172 in nsContainerFrame::PaintChild (this=0x8a68fa4, 
    aPresContext=0x8890498, aRenderingContext=@0x8a74ab8, 
    aDirtyRect=@0xbfffe454, aFrame=0x8a68fdc, 
    aWhichLayer=eFramePaintLayer_Overlay) at nsContainerFrame.cpp:209
#6  0x41756ff1 in nsContainerFrame::PaintChildren (this=0x8a68fa4, 
    aPresContext=0x8890498, aRenderingContext=@0x8a74ab8, 
    aDirtyRect=@0xbfffe454, aWhichLayer=eFramePaintLayer_Overlay)
    at nsContainerFrame.cpp:154
#7  0x417726b9 in nsHTMLContainerFrame::Paint (this=0x8a68fa4, 
    aPresContext=0x8890498, aRenderingContext=@0x8a74ab8, 
    aDirtyRect=@0xbfffe454, aWhichLayer=eFramePaintLayer_Overlay)
    at nsHTMLContainerFrame.cpp:105
#8  0x41757172 in nsContainerFrame::PaintChild (this=0x8a68f1c, 
    aPresContext=0x8890498, aRenderingContext=@0x8a74ab8, 
    aDirtyRect=@0xbfffe764, aFrame=0x8a68fa4, 
    aWhichLayer=eFramePaintLayer_Overlay) at nsContainerFrame.cpp:209
#9  0x41750756 in nsBlockFrame::PaintChildren (this=0x8a68f1c, 
    aPresContext=0x8890498, aRenderingContext=@0x8a74ab8, 
    aDirtyRect=@0xbfffe764, aWhichLayer=eFramePaintLayer_Overlay)
    at nsBlockFrame.cpp:6397
#10 0x4175046e in nsBlockFrame::Paint (this=0x8a68f1c, aPresContext=0x8890498, 
    aRenderingContext=@0x8a74ab8, aDirtyRect=@0xbfffe764, 
    aWhichLayer=eFramePaintLayer_Overlay) at nsBlockFrame.cpp:6274
#11 0x41757172 in nsContainerFrame::PaintChild (this=0x8929e04, 
---Type <return> to continue, or q <return> to quit--- 
    aPresContext=0x8890498, aRenderingContext=@0x8a74ab8, 
    aDirtyRect=@0xbfffea74, aFrame=0x8a68f1c, 
    aWhichLayer=eFramePaintLayer_Overlay) at nsContainerFrame.cpp:209
#12 0x41750756 in nsBlockFrame::PaintChildren (this=0x8929e04, 
    aPresContext=0x8890498, aRenderingContext=@0x8a74ab8, 
    aDirtyRect=@0xbfffea74, aWhichLayer=eFramePaintLayer_Overlay)
    at nsBlockFrame.cpp:6397
#13 0x4175046e in nsBlockFrame::Paint (this=0x8929e04, aPresContext=0x8890498, 
    aRenderingContext=@0x8a74ab8, aDirtyRect=@0xbfffea74, 
    aWhichLayer=eFramePaintLayer_Overlay) at nsBlockFrame.cpp:6274
#14 0x41757172 in nsContainerFrame::PaintChild (this=0x8929d7c, 
    aPresContext=0x8890498, aRenderingContext=@0x8a74ab8, 
    aDirtyRect=@0xbfffed84, aFrame=0x8929e04, 
    aWhichLayer=eFramePaintLayer_Overlay) at nsContainerFrame.cpp:209
#15 0x41750756 in nsBlockFrame::PaintChildren (this=0x8929d7c, 
    aPresContext=0x8890498, aRenderingContext=@0x8a74ab8, 
    aDirtyRect=@0xbfffed84, aWhichLayer=eFramePaintLayer_Overlay)
    at nsBlockFrame.cpp:6397
#16 0x4175046e in nsBlockFrame::Paint (this=0x8929d7c, aPresContext=0x8890498, 
    aRenderingContext=@0x8a74ab8, aDirtyRect=@0xbfffed84, 
    aWhichLayer=eFramePaintLayer_Overlay) at nsBlockFrame.cpp:6274
#17 0x41757172 in nsContainerFrame::PaintChild (this=0x8928e94, 
    aPresContext=0x8890498, aRenderingContext=@0x8a74ab8, 
    aDirtyRect=@0xbfffefdc, aFrame=0x8929d7c, 
    aWhichLayer=eFramePaintLayer_Overlay) at nsContainerFrame.cpp:209
#18 0x41756ff1 in nsContainerFrame::PaintChildren (this=0x8928e94, 
    aPresContext=0x8890498, aRenderingContext=@0x8a74ab8, 
    aDirtyRect=@0xbfffefdc, aWhichLayer=eFramePaintLayer_Overlay)
    at nsContainerFrame.cpp:154
#19 0x417726b9 in nsHTMLContainerFrame::Paint (this=0x8928e94, 
    aPresContext=0x8890498, aRenderingContext=@0x8a74ab8, 
    aDirtyRect=@0xbfffefdc, aWhichLayer=eFramePaintLayer_Overlay)
    at nsHTMLContainerFrame.cpp:105
#20 0x417a0c5f in PresShell::Paint (this=0x88a6158, aView=0x8a8e1e8, 
    aRenderingContext=@0x8a74ab8, aDirtyRect=@0xbfffefdc)
    at nsPresShell.cpp:3977
#21 0x41dbd445 in ?? ()

Comment 1

[Robert Ginda]

uncommenting the debug printf's gives...

aX=309 aY=8, aWidth=0 aHeight=0
surfaceWidth=800 surfaceHeight=600
readX=309 readY=8 readWidth=0 readHeight=0 destX=0 destY=0

Comment 2

[Peter Trudelle]

->tor, dup?

Comment 3

[tor]

Yep, duplicate of 52275.


*** This bug has been marked as a duplicate of 52275 ***

Comment 4

[Scott Brodmerkle]

Verified dupe.