549737 - [D2D] Crash [@ gfxContext::SetSource] with -moz-transform: scale

Status: RESOLVED WORKSFORME

(Core :: Graphics, defect)

Description

[Martijn Wargers (dead)]

Attachment: testcase

In about:config, you have to set:
gfx.font_rendering.directwrite.enabled=true.
mozilla.widget.render-mode=6(RENDER_DIRECT2D).

See testcase, which crashes directly or after a few reloads with the above about:config prefs set.
I'm on Windows 7, with the classic theme set, if that matters.

http://crash-stats.mozilla.com/report/index/a2f2fc9c-a91b-473c-a3c8-8d3882100302
0  	xul.dll  	gfxContext::SetSource  	 gfx/thebes/src/gfxContext.cpp:680
1 	xul.dll 	gfxAlphaRecovery::RecoverAlpha 	gfx/thebes/src/gfxAlphaRecovery.cpp:71
2 	xul.dll 	gfxWindowsNativeDrawing::PaintToContext 	
3 	xul.dll 	nsNativeThemeWin::ClassicDrawWidgetBackground 	widget/src/windows/nsNativeThemeWin.cpp:2823
4 	xul.dll 	nsNativeThemeWin::DrawWidgetBackground 	widget/src/windows/nsNativeThemeWin.cpp:988
5 	xul.dll 	nsCSSRendering::PaintBackgroundWithSC 	layout/base/nsCSSRendering.cpp:2088
6 	xul.dll 	nsDisplayBackground::Paint 	layout/base/nsDisplayList.cpp:1144
7 	xul.dll 	nsDisplayList::PaintThebesLayers 	layout/base/nsDisplayList.cpp:843
8 	xul.dll 	nsDisplayList::Paint 	layout/base/nsDisplayList.cpp:771
9 	xul.dll 	nsDisplayTransform::Paint 	layout/base/nsDisplayList.cpp:1852
10 	xul.dll 	nsDisplayList::PaintThebesLayers 	layout/base/nsDisplayList.cpp:843
11 	xul.dll 	nsDisplayList::Paint 	layout/base/nsDisplayList.cpp:771
12 	xul.dll 	nsDisplayTransform::Paint 	layout/base/nsDisplayList.cpp:1852
13 	xul.dll 	nsDisplayList::PaintThebesLayers 	layout/base/nsDisplayList.cpp:843
14 	xul.dll 	nsDisplayList::Paint 	layout/base/nsDisplayList.cpp:771
15 	xul.dll 	nsDisplayTransform::Paint 	layout/base/nsDisplayList.cpp:1852
16 	xul.dll 	nsDisplayList::PaintThebesLayers 	layout/base/nsDisplayList.cpp:843
17 	xul.dll 	nsDisplayList::Paint 	layout/base/nsDisplayList.cpp:771
18 	xul.dll 	nsDisplayTransform::Paint 	layout/base/nsDisplayList.cpp:1852
19 	xul.dll 	nsDisplayList::PaintThebesLayers 	layout/base/nsDisplayList.cpp:843
20 	xul.dll 	nsDisplayList::Paint 	layout/base/nsDisplayList.cpp:771
21 	xul.dll 	nsLayoutUtils::PaintFrame 	layout/base/nsLayoutUtils.cpp:1195
22 	xul.dll 	PresShell::Paint 	layout/base/nsPresShell.cpp:5764
23 	xul.dll 	nsViewManager::Refresh 	view/src/nsViewManager.cpp:426
24 	xul.dll 	nsViewManager::DispatchEvent 	view/src/nsViewManager.cpp:877
25 	xul.dll 	HandleEvent 	view/src/nsView.cpp:160
26 	xul.dll 	nsWindow::DispatchEvent 	widget/src/windows/nsWindow.cpp:3061
27 	xul.dll 	nsWindow::DispatchWindowEvent 	widget/src/windows/nsWindow.cpp:3089
28 	xul.dll 	nsWindow::OnPaint 	widget/src/windows/nsWindowGfx.cpp:542
29 	xul.dll 	nsWindow::ProcessMessage 	widget/src/windows/nsWindow.cpp:4085
30 	xul.dll 	nsWindow::WindowProc 	widget/src/windows/nsWindow.cpp:3777
31 	user32.dll 	InternalCallWinProc 	
32 	user32.dll 	UserCallWinProcCheckWow 	
33 	user32.dll 	DispatchClientMessage 	
34 	user32.dll 	__fnDWORD 	
35 	ntdll.dll 	KiUserCallbackDispatcher 	
36 	ntdll.dll 	KiUserApcDispatcher 	
37 	user32.dll 	DispatchMessageW 	
38 	xul.dll 	nsBaseAppShell::OnProcessNextEvent 	widget/src/xpwidgets/nsBaseAppShell.cpp:311
39 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:508
40 	xul.dll 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:142
41 	xul.dll 	xul.dll@0x98d203 	
42 	xul.dll 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:216
43 	xul.dll 	MessageLoop::RunHandler 	ipc/chromium/src/base/message_loop.cc:199
44 	xul.dll 	_IsNonwritableInCurrentImage 	
45 	xul.dll 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:173
46 	xul.dll 	nsBaseAppShell::Run 	widget/src/xpwidgets/nsBaseAppShell.cpp:174
47 	xul.dll 	nsAppShell::Run 	widget/src/windows/nsAppShell.cpp:239

Comment 1

[Martijn Wargers (dead)]

Attachment: testcase2

Comment 2

[Martijn Wargers (dead)]

The attached testcases, are wfm, but I still have an unminimized testcase that crashes with this stacktrace.

Comment 3

[Bas Schouten (:bas.schouten)]

I'd be interested in seeing a testcase which still crashes, otherwise let's resolve this.