73178 - 2001-03-22-08-trunk crashes in nsTransform2D::TransformNoXLateCoord

Status: VERIFIED FIXED

(Core :: Layout, defect)

Description

[Roland Mainz]

2001-03-22-08-trunk(+patches from bug 72087 for Xprint module) build on Linux
with gcc 2.95.2 and on Solaris build with Sun Workshop 6 Update 2 EA2 crashes
with the following stack trace when printing via Xprint module due non-existing
mTranMatrix object (=nil):
-- snip --
t@1 (l@1) signal SEGV (no mapping at the fault address) in
nsTransform2D::TransformNoXLateCoord at line 298 in file "nsTransform2D.cpp"
  298         break;
(/opt/SUNWspro/bin/../WS6U2/bin/sparcv9/dbx) where
current thread: t@1
=>[1] nsTransform2D::TransformNoXLateCoord(this = (nil), ptX = 0xffbea8c4, ptY =
0xffbea8c8), line 298 in "nsTransform2D.cpp"
  [2] nsRenderingContextXP::DrawImage(this = 0xb5fe20, aImage = 0x8c8438, aSRect
= STRUCT, aDRect = STRUCT), line 1403 in "nsRenderingContextXP.cpp"
  [3] nsImageFrame::Paint(this = 0x9c38a4, aPresContext = 0x9cce00,
aRenderingContext = CLASS, aDirtyRect = STRUCT, aWhichLayer =
eFramePaintLayer_Overlay), line 1055 in "nsImageFrame.cpp"
  [4] nsContainerFrame::PaintChild(this = 0x9c377c, aPresContext = 0x9cce00,
aRenderingContext = CLASS, aDirtyRect = STRUCT, aFrame = 0x9c38a4, aWhichLayer =
eFramePaintLayer_Overlay), line 206 in "nsContainerFrame.cpp"
  [5] nsBlockFrame::PaintChildren(this = 0x9c377c, aPresContext = 0x9cce00,
aRenderingContext = CLASS, aDirtyRect = STRUCT, aWhichLayer =
eFramePaintLayer_Overlay), line 6571 in "nsBlockFrame.cpp"
  [6] nsBlockFrame::Paint(this = 0x9c377c, aPresContext = 0x9cce00,
aRenderingContext = CLASS, aDirtyRect = STRUCT, aWhichLayer =
eFramePaintLayer_Overlay), line 6449 in "nsBlockFrame.cpp"
  [7] nsContainerFrame::PaintChild(this = 0x9c36f4, aPresContext = 0x9cce00,
aRenderingContext = CLASS, aDirtyRect = STRUCT, aFrame = 0x9c377c, aWhichLayer =
eFramePaintLayer_Overlay), line 206 in "nsContainerFrame.cpp"
  [8] nsBlockFrame::PaintChildren(this = 0x9c36f4, aPresContext = 0x9cce00,
aRenderingContext = CLASS, aDirtyRect = STRUCT, aWhichLayer =
eFramePaintLayer_Overlay), line 6571 in "nsBlockFrame.cpp"
  [9] nsBlockFrame::Paint(this = 0x9c36f4, aPresContext = 0x9cce00,
aRenderingContext = CLASS, aDirtyRect = STRUCT, aWhichLayer =
eFramePaintLayer_Overlay), line 6449 in "nsBlockFrame.cpp"
  [10] nsContainerFrame::PaintChild(this = 0x9c366c, aPresContext = 0x9cce00,
aRenderingContext = CLASS, aDirtyRect = STRUCT, aFrame = 0x9c36f4, aWhichLayer =
eFramePaintLayer_Overlay), line 206 in "nsContainerFrame.cpp"
  [11] nsBlockFrame::PaintChildren(this = 0x9c366c, aPresContext = 0x9cce00,
aRenderingContext = CLASS, aDirtyRect = STRUCT, aWhichLayer =
eFramePaintLayer_Overlay), line 6571 in "nsBlockFrame.cpp"
  [12] nsBlockFrame::Paint(this = 0x9c366c, aPresContext = 0x9cce00,
aRenderingContext = CLASS, aDirtyRect = STRUCT, aWhichLayer =
eFramePaintLayer_Overlay), line 6449 in "nsBlockFrame.cpp"
  [13] nsContainerFrame::PaintChild(this = 0x9c3614, aPresContext = 0x9cce00,
aRenderingContext = CLASS, aDirtyRect = STRUCT, aFrame = 0x9c366c, aWhichLayer =
eFramePaintLayer_Overlay), line 206 in "nsContainerFrame.cpp"
  [14] nsContainerFrame::PaintChildren(this = 0x9c3614, aPresContext = 0x9cce00,
aRenderingContext = CLASS, aDirtyRect = STRUCT, aWhichLayer =
eFramePaintLayer_Overlay), line 151 in "nsContainerFrame.cpp"
  [15] nsContainerFrame::Paint(this = 0x9c3614, aPresContext = 0x9cce00,
aRenderingContext = CLASS, aDirtyRect = STRUCT, aWhichLayer =
eFramePaintLayer_Overlay), line 133 in "nsContainerFrame.cpp"
  [16] nsPageFrame::Paint(this = 0x9c3614, aPresContext = 0x9cce00,
aRenderingContext = CLASS, aDirtyRect = STRUCT, aWhichLayer =
eFramePaintLayer_Overlay), line 313 in "nsPageFrame.cpp"
  [17] PresShell::Paint(this = 0xa01590, aView = 0xa02c70, aRenderingContext =
CLASS, aDirtyRect = STRUCT), line 4806 in "nsPresShell.cpp"
  [18] nsView::Paint(this = ???, rc = CLASS, rect = STRUCT, aPaintFlags = ???,
aResult = ???) (optimized), at 0xfba3efc0 (line ~275) in "nsView.cpp"
  [19] nsViewManager::RenderDisplayListElement(this = ???, element = ???, aRC =
CLASS) (optimized), at 0xfba4adcc (line ~1375) in "nsViewManager.cpp"
  [20] nsViewManager::RenderViews(this = ???, aRootView = ???, aRC = CLASS,
aRect = STRUCT, aResult = ???) (optimized), at 0xfba4ab30 (line ~1299) in
"nsViewManager.cpp"
  [21] nsViewManager::Display(this = ???, aView = ???, aX = ???, aY = ???)
(optimized), at 0xfba4e1fc (line ~2900) in "nsViewManager.cpp"
  [22] nsSimplePageSequenceFrame::Print(this = 0x9c35bc, aPresContext =
0x9cce00, aPrintOptions = 0x8b6fb8, aStatusCallback = (nil)), line 603 in
"nsSimplePageSequence.cpp"
  [23] DocumentViewerImpl::PrintContent(this = ???, aParent = ???, aDContext =
???, aDOMWin = ???, aIsSubDoc = ???) (optimized), at 0xfc07e3a0 (line ~1699) in
"nsDocumentViewer.cpp"
  [24] DocumentViewerImpl::DocumentReadyForPrinting(this = ???) (optimized), at
0xfc07f6bc (line ~2052) in "nsDocumentViewer.cpp"
  [25] DocumentViewerImpl::Print(this = ???, aSilent = ???, aFile = ???,
aPrintListener = ???) (optimized), at 0xfc08169c (line ~2535) in
"nsDocumentViewer.cpp"
  [26] GlobalWindowImpl::Print(this = ???) (optimized), at 0xfe973ffc (line
~1742) in "nsGlobalWindow.cpp"
  [27] WindowInternalPrint(cx = ???, obj = ???, argc = ???, argv = ???, rval =
???) (optimized), at 0xfe9605c8 (line ~3550) in "nsJSWindow.cpp"
  [28] js_Invoke(cx = ???, argc = ???, flags = ???) (optimized), at 0xfefc3658
(line ~781) in "jsinterp.c"
  [29] js_Interpret(cx = ???, result = ???) (optimized), at 0xfefceff0 (line
~2674) in "jsinterp.c"
  [30] js_Invoke(cx = ???, argc = ???, flags = ???) (optimized), at 0xfefc36cc
(line ~798) in "jsinterp.c"
  [31] js_InternalInvoke(cx = ???, obj = ???, fval = ???, flags = ???, argc =
???, argv = ???, rval = ???) (optimized), at 0xfefc3930 (line ~870) in
"jsinterp.c"
  [32] JS_CallFunctionValue(cx = ???, obj = ???, fval = ???, argc = ???, argv =
???, rval = ???) (optimized), at 0xfef9cdc8 (line ~3311) in "jsapi.c"
  [33] nsJSContext::CallEventHandler(this = ???, aTarget = ???, aHandler = ???,
argc = ???, argv = ???, aBoolResult = ???, aReverseReturnResult = ???)
(optimized), at 0xfe9539d8 (line ~939) in "nsJSEnvironment.cpp"
  [34] nsJSEventListener::HandleEvent(this = ???, aEvent = ???) (optimized), at
0xfe9be81c (line ~149) in "nsJSEventListener.cpp"
  [35] nsEventListenerManager::HandleEventSubType(this = ???, aListenerStruct =
???, aDOMEvent = ???, aCurrentTarget = ???, aSubType = ???, aPhaseFlags = ???)
(optimized), at 0xfbd79f2c (line ~906) in "nsEventListenerManager.cpp"
  [36] nsEventListenerManager::HandleEvent(this = ???, aPresContext = ???,
aEvent = ???, aDOMEvent = ???, aCurrentTarget = ???, aFlags = ???, aEventStatus
= ???) (optimized), at 0xfbd7c148 (line ~1788) in "nsEventListenerManager.cpp"
  [37] nsXULElement::HandleDOMEvent(this = ???, aPresContext = ???, aEvent =
???, aDOMEvent = ???, aFlags = ???, aEventStatus = ???) (optimized), at
0xfbf631c8 (line ~3708) in "nsXULElement.cpp"
  [38] PresShell::HandleDOMEventWithTarget(this = 0x278c00, aTargetContent =
0x3bcf70, aEvent = 0xffbed7bc, aStatus = 0xffbed800), line 5108 in
"nsPresShell.cpp"
  [39] nsMenuFrame::Execute(this = ???) (optimized), at 0xfdca9a88 (line ~1400)
in "nsMenuFrame.cpp"
  [40] nsMenuFrame::HandleEvent(this = ???, aPresContext = ???, aEvent = ???,
aEventStatus = ???) (optimized), at 0xfdca630c (line ~376) in "nsMenuFrame.cpp"
  [41] PresShell::HandleEventInternal(this = 0x278c00, aEvent = 0xffbedf6c,
aView = 0x850db8, aFlags = 1U, aStatus = 0xffbedd7c), line 5076 in
"nsPresShell.cpp"
  [42] PresShell::HandleEvent(this = 0x278c00, aView = 0x850db8, aEvent =
0xffbedf6c, aEventStatus = 0xffbedd7c, aForceHandle = 0, aHandled = 1), line
4996 in "nsPresShell.cpp"
  [43] nsView::HandleEvent(this = ???, event = ???, aEventFlags = ???, aStatus =
???, aForceHandle = ???, aHandled = ???) (optimized), at 0xfba3f224 (line ~359)
in "nsView.cpp"
  [44] nsView::HandleEvent(this = ???, event = ???, aEventFlags = ???, aStatus =
???, aForceHandle = ???, aHandled = ???) (optimized), at 0xfba3f190 (line ~343)
in "nsView.cpp"
  [45] nsView::HandleEvent(this = ???, event = ???, aEventFlags = ???, aStatus =
???, aForceHandle = ???, aHandled = ???) (optimized), at 0xfba3f190 (line ~343)
in "nsView.cpp"
  [46] nsView::HandleEvent(this = ???, event = ???, aEventFlags = ???, aStatus =
???, aForceHandle = ???, aHandled = ???) (optimized), at 0xfba3f190 (line ~343)
in "nsView.cpp"
  [47] nsViewManager::DispatchEvent(this = ???, aEvent = ???, aStatus = ???)
(optimized), at 0xfba4c378 (line ~1975) in "nsViewManager.cpp"
  [48] HandleEvent(aEvent = ???) (optimized), at 0xfba3e5d4 (line ~67) in
"nsView.cpp"
  [49] nsWidget::DispatchEvent(this = ???, aEvent = ???, aStatus = ???)
(optimized), at 0xfd74d1c8 (line ~1471) in "nsWidget.cpp"
  [50] nsWidget::DispatchWindowEvent(this = ???, event = ???) (optimized), at
0xfd74ce2c (line ~1362) in "nsWidget.cpp"
  [51] nsWidget::DispatchMouseEvent(this = ???, aEvent = STRUCT) (optimized), at
0xfd74d2a8 (line ~1498) in "nsWidget.cpp"
  [52] nsWidget::OnButtonReleaseSignal(this = ???, aGdkButtonEvent = ???)
(optimized), at 0xfd74e37c (line ~2039) in "nsWidget.cpp"
  [53] nsWindow::HandleGDKEvent(this = ???, event = ???) (optimized), at
0xfd7569f8 (line ~1465) in "nsWindow.cpp"
  [54] dispatch_superwin_event(event = ???, window = ???) (optimized), at
0xfd742988 (line ~1022) in "nsGtkEventHandler.cpp"
  [55] handle_gdk_event(event = ???, data = ???) (optimized), at 0xfd742608
(line ~876) in "nsGtkEventHandler.cpp"
dbx: warning: can't find file
"/home/gisburn/package-builds/gtk+/gtk+-1.2.8/objdir/gdk/gdkevents.lo"
dbx: warning: see `help finding-files'
  [56] gdk_event_dispatch(0x0, 0xffbee388, 0x0, 0x0, 0x0, 0xffbee2f0), at
0xfd241470
dbx: warning: can't find file
"/home/gisburn/package-builds/glib/glib-1.2.8/objdir/gmain.lo"
  [57] g_main_dispatch(0xffbee388, 0x98a20, 0x1, 0x1f1568, 0xff3df650, 0x378),
at 0xfd1b6dc8
  [58] g_main_iterate(0x1, 0x1, 0xfeac0808, 0xfd732f08, 0xff3df650, 0x1e), at
0xfd1b7bcc
  [59] g_main_run(0x1f1310, 0x1f1310, 0xff1494b4, 0x5, 0x669a0, 0x0), at
0xfd1b7f64
dbx: warning: can't find file
"/home/gisburn/package-builds/gtk+/gtk+-1.2.8/objdir/gtk/gtkmain.lo"
  [60] gtk_main(0x669a0, 0xff14ba08, 0x0, 0x80004000, 0x0, 0xfd7c7968), at
0xfd4d60a0
  [61] nsAppShell::Run(this = ???) (optimized), at 0xfd732f08 (line ~365) in
"nsAppShell.cpp"
  [62] nsAppShellService::Run(this = ???) (optimized), at 0xfdf2ca6c (line ~407)
in "nsAppShellService.cpp"
  [63] main1(argc = ???, argv = ???, nativeApp = ???) (optimized), at 0x16600
(line ~1014) in "nsAppRunner.cpp"
  [64] main(argc = ???, argv = ???) (optimized), at 0x17054 (line ~1310) in
"nsAppRunner.cpp"
-- snip --

Choosing component "Layout"... but this is only raw guessing... ;-(

Comment 1

[Roland Mainz]

Xprint always crashes when it tries to print images due this issue... ;-(

Comment 2

[karnaze (gone)]

Reassinging to dcone.

Comment 3

[Stuart Parmenter]

i fixed this

Comment 4

[Stuart Parmenter]

er

Comment 5

[Stuart Parmenter]

taking

Comment 6

[Stuart Parmenter]

Attachment: fix

Comment 7

[Roland Mainz]

These fixes (http://bugzilla.mozilla.org/showattachment.cgi?attach_id=30090)
have been included&superset by Xprint monster patch in bug 72087...
... should I close this bug now or should I wait until current patch for bug
72087 has been checked-in ?

Comment 8

[Mike Shaver (:shaver emeritus)]

sr=shaver, since we're not going to get this in under Roland's patch any time soon.

Comment 9

[Stuart Parmenter]

fixed

Comment 10

[Chris Petersen]

Marking verified in the May 22nd build.