801962 - Hang or crash with gfx.canvas.azure.accelerated, scale, fillText

Status: VERIFIED WORKSFORME

(Core :: Graphics, defect)

Description

[Jesse Ruderman]

Attachment: testcase (may hang or crash)

Firefox trunk, Mac OS X 10.7.5, Mac Mini.

With:
  user_pref("gfx.canvas.azure.accelerated", true);

The testcase causes high memory use (about 5 GB) and a warning from CA:

Oct 15 17:27:28 jruderman-mini3.local firefox-bin[1111] <Error>: CGAffineTransformInvert: singular matrix.

I noticed this because under ASan, a variant resulted in a malloc failure followed by a null deref [@ CA::CG::emit_glyphs].

Comment 1

[Matt Woodrow (:mattwoodrow)]

Attachment: Don't attempt to draw with a singular matrix

Comment 2

[Jeff Muizelaar [:jrmuizel]]

Comment on attachment 707915 [details] [diff] [review]
Don't attempt to draw with a singular matrix

Review of attachment 707915 [details] [diff] [review]:
-----------------------------------------------------------------

I don't really like this patch. The WebKit CG backend doensn't seem to need to do this. Does this test case also break them? If not how do they avoid the problem?

Comment 3

[Virtual_ManPL [:Virtual] 🇵🇱 - (please needinfo? me - so I will see your comment/reply/question/etc.)]

Can you still reproduce the issue with latest version with clean new fresh profile without any addons and plugins?

Comment 4

[Jesse Ruderman]

WFM on trunk, on a laptop with Mac OS X 10.10.x.

Comment 5

[Virtual_ManPL [:Virtual] 🇵🇱 - (please needinfo? me - so I will see your comment/reply/question/etc.)]

Thank you very much for retest and reply.