78349 - Crash when try to open an image with invalid format.

Status: VERIFIED DUPLICATE of bug 77328

(Core :: Graphics: ImageLib, defect)

Description

[Andriy Palamarchuk]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.8.1+)
Gecko/20010425
BuildID:    

I got a jpg image and tried to open it in Mozilla. The browser crashes.
I tried to view the image by other programs. Kodak "Imaging for Windows" reports
the image has invalid format.

Reproducible: Always
Steps to Reproduce:
1. Open the image file.
2.
3.

Actual Results:  Browser crash.

Expected Results:  Error message about the image in invalid format.

Crashes IDs: TB29851789X, TB29850922Q. Contact me for the image file.

Comment 1

[Andriy Palamarchuk]

Attachment: The image file is attached.

Comment 2

[Matthias Versen [:Matti]]

Confirming with win2k build 20010501.. (CVS debug)

Stack Trace:
memset() line 108
nsJPEGDecoder::OutputScanlines(int -2) line 528 + 27 bytes
nsJPEGDecoder::WriteFrom(nsJPEGDecoder * const 0x054f8d20, nsIInputStream *
0x05417af8, unsigned int 4070, unsigned int * 0x0012f72c) line 395 + 10 bytes
imgRequest::OnDataAvailable(imgRequest * const 0x0540ef98, nsIRequest *
0x05409250, nsISupports * 0x00000000, nsIInputStream * 0x05417af8, unsigned int
0, unsigned int 4070) line 769 + 47 bytes
ProxyListener::OnDataAvailable(ProxyListener * const 0x0503ba20, nsIRequest *
0x05409250, nsISupports * 0x00000000, nsIInputStream * 0x05417af8, unsigned int
0, unsigned int 4070) line 374
ImageListener::OnDataAvailable(ImageListener * const 0x051cde18, nsIRequest *
0x05409250, nsISupports * 0x00000000, nsIInputStream * 0x05417af8, unsigned int
0, unsigned int 4070) line 201
nsDocumentOpenInfo::OnDataAvailable(nsDocumentOpenInfo * const 0x055367a0,
nsIRequest * 0x05409250, nsISupports * 0x00000000, nsIInputStream * 0x05417af8,
unsigned int 0, unsigned int 4070) line 259 + 46 bytes
nsHTTPFinalListener::OnDataAvailable(nsHTTPFinalListener * const 0x051cc930,
nsIRequest * 0x05409250, nsISupports * 0x00000000, nsIInputStream * 0x05417af8,
unsigned int 0, unsigned int 4070) line 1173 + 46 bytes
nsStreamListenerTee::OnDataAvailable(nsStreamListenerTee * const 0x057ad400,
nsIRequest * 0x05409250, nsISupports * 0x00000000, nsIInputStream * 0x05445cf0,
unsigned int 0, unsigned int 4070) line 56 + 51 bytes
nsHTTPChunkConv::OnDataAvailable(nsHTTPChunkConv * const 0x054168e0, nsIRequest
* 0x05409250, nsISupports * 0x00000000, nsIInputStream * 0x056e51a8, unsigned
int 0, unsigned int 1397) line 211 + 46 bytes
nsHTTPServerListener::OnDataAvailable(nsHTTPServerListener * const 0x058ad858,
nsIRequest * 0x053d7720, nsISupports * 0x05409250, nsIInputStream * 0x056e51a8,
unsigned int 2896, unsigned int 1397) line 542 + 64 bytes
nsOnDataAvailableEvent::HandleEvent() line 173 + 70 bytes
nsARequestObserverEvent::HandlePLEvent(PLEvent * 0x0527d914) line 64
PL_HandleEvent(PLEvent * 0x0527d914) line 588 + 10 bytes
PL_ProcessPendingEvents(PLEventQueue * 0x00e70c70) line 518 + 9 bytes
_md_EventReceiverProc(HWND__ * 0x001500d4, unsigned int 49353, unsigned int 0,
long 15142000) line 1069 + 9 bytes
USER32! 77e048dc()
USER32! 77e04aa7()
USER32! 77e166fd()
nsAppShellService::Run(nsAppShellService * const 0x00e97ce8) line 408
main1(int 2, char * * 0x003576c8, nsISupports * 0x00000000) line 1005 + 32 bytes
main(int 2, char * * 0x003576c8) line 1306 + 37 bytes
mainCRTStartup() line 338 + 17 bytes
KERNEL32! 77e892a6()

Comment 3

[Matthias Versen [:Matti]]

based on the stack this is a dupe of bug 77328.


*** This bug has been marked as a duplicate of 77328 ***

Comment 4

[timeless]

vrfy dupe per stacktrace.