75951 - crash when reading mail

Status: VERIFIED DUPLICATE of bug 74441

(Core :: Graphics: ImageLib, defect)

Description

[Christopher Blizzard (:blizzard)]

Tree is pulled on April 13.

When reading mail and especially when loading messages I've been getting this crash.

#0  0x40298c51 in __libc_nanosleep () from /lib/libc.so.6
#1  0x40298aee in __sleep (seconds=300)
    at ../sysdeps/unix/sysv/linux/sleep.c:85
#2  0x0804eb87 in ah_crap_handler (signum=11) at nsSigHandlers.cpp:117
#3  0x401d82f1 in pthread_sighandler (signo=11, ctx=
      {gs = 0, __gsh = 0, fs = 0, __fsh = 0, es = 43, __esh = 0, ds = 43, __dsh
= 0, edi = 1108321112, esi = 3221218112, ebp = 3221218152, esp = 3221217960, ebx
= 1093639508, edx = 0, ecx = 1, eax = 3221218112, trapno = 14, err = 4, eip =
1092337106, cs = 35, __csh = 0, eflags = 2163330, esp_at_signal = 3221217960, ss
= 43, __ssh = 0, fpstate = 0xbfffe028, oldmask = 2147483648, cr2 = 0})
    at signals.c:97
#4  <signal handler called>
#5  nsImageFrame::Paint (this=0x420fa358, aPresContext=0x41f510a0, 
    aRenderingContext=@0x420f0d98, aDirtyRect=@0xbfffe3a0, 
    aWhichLayer=eFramePaintLayer_Underlay)
    at ../../../../dist/include/nsCOMPtr.h:648
#6  0x411a6de6 in nsContainerFrame::PaintChild (this=0x420fa2d8, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffe4c0, aFrame=0x420fa358, 
    aWhichLayer=eFramePaintLayer_Underlay) at nsContainerFrame.cpp:206
#7  0x411a2d96 in nsBlockFrame::PaintChildren (this=0x420fa2d8, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffe4c0, aWhichLayer=eFramePaintLayer_Underlay)
    at nsBlockFrame.cpp:6593
#8  0x411a2c03 in nsBlockFrame::Paint (this=0x420fa2d8, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffe4c0, aWhichLayer=eFramePaintLayer_Underlay)
    at nsBlockFrame.cpp:6470
#9  0x411a6de6 in nsContainerFrame::PaintChild (this=0x420fa280, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffe640, aFrame=0x420fa2d8, 
    aWhichLayer=eFramePaintLayer_Underlay) at nsContainerFrame.cpp:206
#10 0x411a6cb9 in nsContainerFrame::PaintChildren (this=0x420fa280, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffe640, aWhichLayer=eFramePaintLayer_Underlay)
    at nsContainerFrame.cpp:151
#11 0x4124f729 in nsTableCellFrame::Paint (this=0x420fa280, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffe640, aWhichLayer=eFramePaintLayer_Underlay)
    at nsTableCellFrame.cpp:328
#12 0x4125f01f in nsTableRowFrame::PaintChildren (this=0x420fa23c, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffe730, aWhichLayer=eFramePaintLayer_Underlay)
    at nsTableRowFrame.cpp:544
#13 0x4125eed8 in nsTableRowFrame::Paint (this=0x420fa23c, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffe730, aWhichLayer=eFramePaintLayer_Underlay)
    at nsTableRowFrame.cpp:499
#14 0x41260f4e in nsTableRowGroupFrame::PaintChildren (this=0x420f9e3c, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffe800, aWhichLayer=eFramePaintLayer_Underlay)
    at nsTableRowGroupFrame.cpp:275
#15 0x41260e33 in nsTableRowGroupFrame::Paint (this=0x420f9e3c, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffe800, aWhichLayer=eFramePaintLayer_Underlay)
    at nsTableRowGroupFrame.cpp:231
#16 0x411a6de6 in nsContainerFrame::PaintChild (this=0x420f9dd8, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffe910, aFrame=0x420f9e3c, 
    aWhichLayer=eFramePaintLayer_Underlay) at nsContainerFrame.cpp:206
#17 0x411a6cb9 in nsContainerFrame::PaintChildren (this=0x420f9dd8, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffe910, aWhichLayer=eFramePaintLayer_Underlay)
    at nsContainerFrame.cpp:151
#18 0x41255294 in nsTableFrame::Paint (this=0x420f9dd8, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffe910, aWhichLayer=eFramePaintLayer_Underlay)
    at nsTableFrame.cpp:1467
#19 0x411a6de6 in nsContainerFrame::PaintChild (this=0x42100fa8, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffe9d0, aFrame=0x420f9dd8, 
    aWhichLayer=eFramePaintLayer_Underlay) at nsContainerFrame.cpp:206
#20 0x4125b491 in nsTableOuterFrame::Paint (this=0x42100fa8, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffe9d0, aWhichLayer=eFramePaintLayer_Underlay)
    at nsTableOuterFrame.cpp:369
#21 0x411a6de6 in nsContainerFrame::PaintChild (this=0x42100f28, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffeaf0, aFrame=0x42100fa8, 
    aWhichLayer=eFramePaintLayer_Underlay) at nsContainerFrame.cpp:206
#22 0x411a2d96 in nsBlockFrame::PaintChildren (this=0x42100f28, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffeaf0, aWhichLayer=eFramePaintLayer_Underlay)
    at nsBlockFrame.cpp:6593
#23 0x411a2c03 in nsBlockFrame::Paint (this=0x42100f28, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffeaf0, aWhichLayer=eFramePaintLayer_Underlay)
    at nsBlockFrame.cpp:6470
#24 0x411a6de6 in nsContainerFrame::PaintChild (this=0x42100ea8, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffec10, aFrame=0x42100f28, 
    aWhichLayer=eFramePaintLayer_Underlay) at nsContainerFrame.cpp:206
#25 0x411a2d96 in nsBlockFrame::PaintChildren (this=0x42100ea8, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffec10, aWhichLayer=eFramePaintLayer_Underlay)
    at nsBlockFrame.cpp:6593
#26 0x411a2c03 in nsBlockFrame::Paint (this=0x42100ea8, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffec10, aWhichLayer=eFramePaintLayer_Underlay)
    at nsBlockFrame.cpp:6470
#27 0x411a6de6 in nsContainerFrame::PaintChild (this=0x42100dd8, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffed30, aFrame=0x42100ea8, 
    aWhichLayer=eFramePaintLayer_Underlay) at nsContainerFrame.cpp:206
#28 0x411a2d96 in nsBlockFrame::PaintChildren (this=0x42100dd8, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffed30, aWhichLayer=eFramePaintLayer_Underlay)
    at nsBlockFrame.cpp:6593
#29 0x411a2c03 in nsBlockFrame::Paint (this=0x42100dd8, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffed30, aWhichLayer=eFramePaintLayer_Underlay)
    at nsBlockFrame.cpp:6470
#30 0x411a6de6 in nsContainerFrame::PaintChild (this=0x42100d58, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffee50, aFrame=0x42100dd8, 
    aWhichLayer=eFramePaintLayer_Underlay) at nsContainerFrame.cpp:206
#31 0x411a2d96 in nsBlockFrame::PaintChildren (this=0x42100d58, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffee50, aWhichLayer=eFramePaintLayer_Underlay)
    at nsBlockFrame.cpp:6593
#32 0x411a2c03 in nsBlockFrame::Paint (this=0x42100d58, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbfffee50, aWhichLayer=eFramePaintLayer_Underlay)
    at nsBlockFrame.cpp:6470
#33 0x411a6de6 in nsContainerFrame::PaintChild (this=0x42100060, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbffff050, aFrame=0x42100d58, 
    aWhichLayer=eFramePaintLayer_Underlay) at nsContainerFrame.cpp:206
#34 0x411a6cb9 in nsContainerFrame::PaintChildren (this=0x42100060, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbffff050, aWhichLayer=eFramePaintLayer_Underlay)
    at nsContainerFrame.cpp:151
#35 0x411b4200 in nsHTMLContainerFrame::Paint (this=0x42100060, 
    aPresContext=0x41f510a0, aRenderingContext=@0x420f0d98, 
    aDirtyRect=@0xbffff050, aWhichLayer=eFramePaintLayer_Underlay)
    at nsHTMLContainerFrame.cpp:106
#36 0x411d898d in PresShell::Paint (this=0x41b81cb0, aView=0x41920220, 
    aRenderingContext=@0x420f0d98, aDirtyRect=@0xbffff050)
    at ../../../../dist/include/nsCOMPtr.h:641
#37 0x4130a826 in nsView::Paint (this=0x41920220, rc=@0x420f0d98, 
    rect=@0xbffff050, aPaintFlags=128, aResult=@0xbffff034)
    at ../../dist/include/nsCOMPtr.h:648
#38 0x41313275 in nsViewManager::RenderDisplayListElement (this=0x41f51290, 
    element=0x420f0e28, aRC=@0x420f0d98) at nsViewManager.cpp:1392
#39 0x41313033 in nsViewManager::RenderViews (this=0x41f51290, 
    aRootView=0x41da5b78, aRC=@0x420f0d98, aRect=@0xbffff1b0, 
    aResult=@0xbffff198) at nsViewManager.cpp:1316
#40 0x41312104 in nsViewManager::Refresh (this=0x41f51290, aView=0x41da5b78, 
    aContext=0x420f0d98, rect=0xbffff290, aUpdateFlags=1)
    at ../../dist/include/nsCOMPtr.h:711
#41 0x413145a3 in nsViewManager::DispatchEvent (this=0x41f51290, 
    aEvent=0xbffff380, aStatus=0xbffff2e8) at nsViewManager.cpp:1911
#42 0x4130a31e in HandleEvent (aEvent=0xbffff380) at nsView.cpp:67
#43 0x405230ca in nsWidget::DispatchEvent (this=0x41f67178, aEvent=0xbffff380, 
    aStatus=@0xbffff33c) at nsWidget.cpp:1471
#44 0x40522fea in nsWidget::DispatchWindowEvent (this=0x41f67178, 
    event=0xbffff380) at nsWidget.cpp:1362
#45 0x40526e0a in nsWindow::DoPaint (this=0x41f67178, aX=0, aY=0, aWidth=1018, 
    aHeight=502, aClipRegion=0x41da5c28) at nsWindow.cpp:705
#46 0x40526f98 in nsWindow::Update (this=0x41f67178)
    at ../../../dist/include/nsCOMPtr.h:641
#47 0x40526cb0 in nsWindow::UpdateIdle (data=0x0) at nsWindow.cpp:617
#48 0x406cb9ad in g_idle_dispatch () from /usr/lib/libglib-1.2.so.0
#49 0x406ca8f3 in g_main_dispatch () from /usr/lib/libglib-1.2.so.0
#50 0x406caf38 in g_main_iterate () from /usr/lib/libglib-1.2.so.0
#51 0x406cb0fc in g_main_run () from /usr/lib/libglib-1.2.so.0
#52 0x405e1983 in gtk_main () from /usr/lib/libgtk-1.2.so.0
#53 0x40514d96 in nsAppShell::Run (this=0x80a2f98) at nsAppShell.cpp:360
#54 0x404b995a in nsAppShellService::Run (this=0x809e970)
    at ../../../dist/include/nsCOMPtr.h:648
#55 0x0804dd1b in main1 (argc=2, argv=0xbffff83c, nativeApp=0x0)
    at ../../dist/include/nsCOMPtr.h:648
#56 0x0804e60b in main (argc=2, argv=0xbffff83c) at nsAppRunner.cpp:1300
#57 0x40203d4c in __libc_start_main (main=0x804e4c0 <main>, argc=2, 
    ubp_av=0xbffff83c, init=0x804a5cc <_init>, fini=0x80503b0 <_fini>, 
    rtld_fini=0x4000d730 <_dl_fini>, stack_end=0xbffff82c)
    at ../sysdeps/generic/libc-start.c:129

Comment 1

[(not reading, please use [e-mail] instead)]

any message in particular crashing you?

Comment 2

[(not reading, please use [e-mail] instead)]

Attachment: a bulletproofing patch that changes the crash into an assert.

Comment 3

[(not reading, please use [e-mail] instead)]

Attachment: a bulletproofing patch that changes the crash into an assert.

Comment 4

[(not reading, please use [e-mail] instead)]

holy piss, how's that attachment get to this bug?

Comment 5

[scottputterman]

It looks like this is http://bugzilla.mozilla.org/show_bug.cgi?id=74441

Comment 6

[Christopher Blizzard (:blizzard)]

I would have to do some poking around to try and find the message that was
causing the crash and I don't have access to that mailbox.  For what it's worth
I suspect that the bug that you references is the same as this.

Comment 7

[sairuh (rarely reading bugmail)]

dupping.

*** This bug has been marked as a duplicate of 74441 ***

Comment 8

[Terri Preston]

Verified Duplicate