Closed Bug 73556 Opened 23 years ago Closed 23 years ago

libpr0n gets negative heights, and crashes

Categories

(Core :: Graphics: ImageLib, defect)

x86
Linux
defect
Not set
normal

Tracking

()

VERIFIED WORKSFORME

People

(Reporter: bbaetz, Assigned: pavlov)

References

()

Details

(Keywords: crash, Whiteboard: [imglib])

The URL http://www.lbpr0n.com/faq.html crashes a CVS build from a few hours ago:

Gdk-ERROR **: BadMatch (invalid parameter attributes)
  serial 7304 error_code 8 request_code 73 minor_code 0

followed by mozilla quitting with exit code 1.

I can't get a backtrace - gdb doesn't stop at the gdk-error.

My build has libpr0n enabled - bryner's non-libpr0n linux build doesn't crash.
*** Bug 73908 has been marked as a duplicate of this bug. ***
for pav....
Assignee: pnunn → pavlov
Keywords: crash
this works ok for me in my build.  if it still happens for you, try applying 
the patches in bug 73161 and see if they still happen.
Status: NEW → RESOLVED
Closed: 23 years ago
Resolution: --- → WORKSFORME
Reopening. This still happens with current CVS (which apparently includes your
patch) I did rm -rf on the NewCache dir, so thats not the problem.

gtk+-1.2.8-7_helix_1, if that matters.
Status: RESOLVED → REOPENED
Resolution: WORKSFORME → ---
If I break on gdk_x_error, I can see that it stops while rendering the top left
image, and in fact its that image that causes the crash. Updating URL.

back trace:
#0  0x4082b2c6 in gdk_x_error () from /usr/lib/libgdk-1.2.so.0
#1  0x408b1ecd in _XError () from /usr/X11R6/lib/libX11.so.6
#2  0x408b054d in _XReply () from /usr/X11R6/lib/libX11.so.6
#3  0x4089a17a in XGetImage () from /usr/X11R6/lib/libX11.so.6
#4  0x40d15a5f in nsImageGTK::DrawComposited (this=0x875e4e8, 
    aContext=@0x87dec58, aSurface=0x824c428, aSX=0, aSY=102, aDX=8, aDY=110, 
    aWidth=400, aHeight=-58) at nsImageGTK.cpp:933
#5  0x40d0c568 in nsImageGTK::Draw (this=0x875e4e8, aContext=@0x87dec58, 
    aSurface=0x824c428, aSX=0, aSY=102, aSWidth=400, aSHeight=-58, aDX=8, 
    aDY=110, aDWidth=400, aDHeight=98) at nsImageGTK.cpp:511
#6  0x40035d44 in nsRenderingContextImpl::DrawImage (this=0x87dec58, 
    aImage=0x87b5570, aSrcRect=0xbfffd9b0, aDestPoint=0xbfffd9c0)
    at ../../dist/include/nsCOMPtr.h:648
#7  0x4164f73b in nsImageFrame::Paint (this=0x85e9918, aPresContext=0x86ab1f8, 
    aRenderingContext=@0x87dec58, aDirtyRect=@0xbfffda90, 
    aWhichLayer=eFramePaintLayer_Overlay)
    at ../../../../dist/include/nsCOMPtr.h:641
#8  0x4162c75d in nsContainerFrame::PaintChild (this=0x85e98cc, 
    aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, 
    aDirtyRect=@0xbfffdf10, aFrame=0x85e9918, 
    aWhichLayer=eFramePaintLayer_Overlay) at nsContainerFrame.cpp:206
#9  0x41626ca1 in nsBlockFrame::PaintChildren (this=0x85e98cc, 
    aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, 
    aDirtyRect=@0xbfffdf10, aWhichLayer=eFramePaintLayer_Overlay)
    at nsBlockFrame.cpp:6572
#10 0x416269b7 in nsBlockFrame::Paint (this=0x85e98cc, aPresContext=0x86ab1f8, 
    aRenderingContext=@0x87dec58, aDirtyRect=@0xbfffdf10, 
    aWhichLayer=eFramePaintLayer_Overlay) at nsBlockFrame.cpp:6449
#11 0x4162c75d in nsContainerFrame::PaintChild (this=0x85e9880, 
    aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, 
    aDirtyRect=@0xbfffe390, aFrame=0x85e98cc, 
    aWhichLayer=eFramePaintLayer_Overlay) at nsContainerFrame.cpp:206
#12 0x41626ca1 in nsBlockFrame::PaintChildren (this=0x85e9880, 
    aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, 
    aDirtyRect=@0xbfffe390, aWhichLayer=eFramePaintLayer_Overlay)
    at nsBlockFrame.cpp:6572
#13 0x416269b7 in nsBlockFrame::Paint (this=0x85e9880, aPresContext=0x86ab1f8, 
    aRenderingContext=@0x87dec58, aDirtyRect=@0xbfffe390, 
    aWhichLayer=eFramePaintLayer_Overlay) at nsBlockFrame.cpp:6449
#14 0x4162c75d in nsContainerFrame::PaintChild (this=0x85e9834, 
    aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, 
    aDirtyRect=@0xbfffe810, aFrame=0x85e9880, 
    aWhichLayer=eFramePaintLayer_Overlay) at nsContainerFrame.cpp:206
#15 0x41626ca1 in nsBlockFrame::PaintChildren (this=0x85e9834, 
    aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, 
    aDirtyRect=@0xbfffe810, aWhichLayer=eFramePaintLayer_Overlay)
    at nsBlockFrame.cpp:6572
#16 0x416269b7 in nsBlockFrame::Paint (this=0x85e9834, aPresContext=0x86ab1f8, 
    aRenderingContext=@0x87dec58, aDirtyRect=@0xbfffe810, 
    aWhichLayer=eFramePaintLayer_Overlay) at nsBlockFrame.cpp:6449
#17 0x4162c75d in nsContainerFrame::PaintChild (this=0x8764834, 
    aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, 
    aDirtyRect=@0xbfffea80, aFrame=0x85e9834, 
    aWhichLayer=eFramePaintLayer_Overlay) at nsContainerFrame.cpp:206
#18 0x4162c629 in nsContainerFrame::PaintChildren (this=0x8764834, 
    aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, 
    aDirtyRect=@0xbfffea80, aWhichLayer=eFramePaintLayer_Overlay)
    at nsContainerFrame.cpp:151
#19 0x41644cfa in nsHTMLContainerFrame::Paint (this=0x8764834, 
    aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, 
    aDirtyRect=@0xbfffea80, aWhichLayer=eFramePaintLayer_Overlay)
    at nsHTMLContainerFrame.cpp:106
#20 0x4167b7ce in PresShell::Paint (this=0x86b0758, aView=0x8759578, 
    aRenderingContext=@0x87dec58, aDirtyRect=@0xbfffea80)
    at ../../../../dist/include/nsCOMPtr.h:641

etc.

I'm building with -O2 - could that be the problem? Those -ve heights look
strange though.

Actually, there was one time where it didn't crash, but shift-reload caused it
to die again.
Negative heights shouldn't happen - pavlov?
Summary: libpr0n causes crash on libpr0n.com → libpr0n gets -ve heights, and crashes
This also occurs on
http://www.gnome.org/
changing summary so it makes sense...
Summary: libpr0n gets -ve heights, and crashes → libpr0n gets negative heights, and crashes
WIN98SE, Mozilla 2001040304.
This bug is affecting Windows, too.

Load http://www.libpr0n.com/faq.png and "shift+reload" couple times and quickly 
at row.

MOZILLA caused an invalid page fault in
module GKGFXWIN.DLL at 0167:60b74ae2.
Registers:
EAX=0222d5dc CS=0167 EIP=60b74ae2 EFLGS=00010206
EBX=00000190 SS=016f ESP=0068f1a4 EBP=0068f1c8
ECX=000000ff DS=016f ESI=830ba000 FS=2a4f
EDX=021f2bd0 ES=016f EDI=00000000 GS=0000
Bytes at CS:EIP:
0f b6 18 c7 45 18 ff 00 00 00 0f af df 29 7d 18 
Stack dump:
bff222ca bff224fe 00cc0020 000004b0 019f2360 0000108e 00000000 0000007c 
830ba000 0068f22c 60b74c30 00000190 00000000 fffffff7 00000190 0000007c 
Whiteboard: [imglib]
wfm using a linux debug build from noon today, as well as a 2001.04.12.08 verif
build.
Status: REOPENED → RESOLVED
Closed: 23 years ago23 years ago
Resolution: --- → WORKSFORME
worksforme as well with a 2001-04-17 debug build
Verified linux build 2001082012
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.