81438 - crash in nsHttpChannel::SetReferrer()

Status: RESOLVED DUPLICATE of bug 81119

(Core :: Graphics: ImageLib, defect)

Description

[Chris McAfee]

mail attachment with espn page crashes, linux & NT, I can try and
get a test case if needed.

#0  0x40c46d5a in nsHttpChannel::SetReferrer (this=0x426cf1a0, referrer=0x0, 
    referrerType=2) at nsHttpChannel.cpp:1823
#1  0x4003e66f in ImageNetContextImpl::GetURL (this=0x426fd930, 
    aURL=0x426fd958, aLoadMethod=DONT_USE_IMG_CACHE, aReader=0x426fda50, 
    IsAnimationLoop=0) at nsImageNetContextAsync.cpp:782
#2  0x40050a7f in IL_GetImage (
    image_url=0x426871b8 "http://espn.go.com/i/mlb/mlb01/story_tile.gif", 
    img_cx=0x42625c70, obs_list=0x42685178, background_color=0xbfffe8c0, 
    req_width=0, req_height=0, flags=0, opaque_cx=0x426e4488, 
    aObserver=0x4269f6ec) at if.cpp:2049
#3  0x4004390a in ImageRequestImpl::Init (this=0x426852e8, 
    aGroupContext=0x42625c70, 
    aUrl=0x426871b8 "http://espn.go.com/i/mlb/mlb01/story_tile.gif", 
    aObserver=0x4269f6ec, aBackgroundColor=0x42b863b4, aWidth=0, aHeight=0, 
    aFlags=0, aNetContext=0x426e4488) at nsImageRequest.cpp:260
#4  0x4003b4d4 in ImageGroupImpl::GetImage (this=0x42688b30, 
    aUrl=0x426871b8 "http://espn.go.com/i/mlb/mlb01/story_tile.gif", 
    aObserver=0x4269f6ec, aBackgroundColor=0x42b863b4, aWidth=0, aHeight=0, 
    aFlags=0) at nsImageGroup.cpp:282
#5  0x41bc2711 in nsFrameImageLoader::Init (this=0x4269f6e8, 
    aPresContext=0x8622bf8, aGroup=0x42688b30, aURL=@0x42b863c0, 
    aBackgroundColor=0x42b863b4, aDesiredSize=0x0, aTargetFrame=0x428d37ac, 
    aAnimationMode=eImageAnimation_Normal, aCallBack=0, aClosure=0x0, 
    aKey=0x428d37ac) at nsFrameImageLoader.cpp:183
#6  0x41bcc3f7 in nsPresContext::StartLoadImage (this=0x8622bf8, 
    aURL=@0x42b863c0, aBackgroundColor=0x42b863b4, aDesiredSize=0x0, 
    aTargetFrame=0x428d37ac, aCallBack=0, aClosure=0x0, aKey=0x428d37ac, 
    aResult=0xbfffeb78) at nsPresContext.cpp:1284
#7  0x41b37887 in nsCSSRendering::PaintBackground (aPresContext=0x8622bf8, 
    aRenderingContext=@0x426f1cc8, aForFrame=0x428d37ac, 
    aDirtyRect=@0xbfffeda4, aBorderArea=@0xbfffec40, aColor=@0x42b863a8, 
    aBorder=@0x42b429b0, aDX=0, aDY=0) at nsCSSRendering.cpp:2141
#8  0x41a6599b in nsHTMLContainerFrame::Paint (this=0x428d37ac, 
    aPresContext=0x8622bf8, aRenderingContext=@0x426f1cc8, 
    aDirtyRect=@0xbfffeda4, aWhichLayer=eFramePaintLayer_Underlay)
    at nsHTMLContainerFrame.cpp:83
#9  0x41a67889 in CanvasFrame::Paint (this=0x428d37ac, aPresContext=0x8622bf8, 
    aRenderingContext=@0x426f1cc8, aDirtyRect=@0xbfffeda4, 
    aWhichLayer=eFramePaintLayer_Underlay) at nsHTMLFrame.cpp:237
#10 0x41a9ccbf in PresShell::Paint (this=0x8629ab8, aView=0x424c28c8, 
    aRenderingContext=@0x426f1cc8, aDirtyRect=@0xbfffeda4)
    at nsPresShell.cpp:5237
#11 0x41d07d9c in nsView::Paint (this=0x424c28c8, rc=@0x426f1cc8, 
    rect=@0xbfffeda4, aPaintFlags=128, aResult=@0xbfffedbc) at nsView.cpp:273
#12 0x41d12650 in nsViewManager::RenderDisplayListElement (this=0x8766040, 
    element=0x41ffc238, aRC=@0x426f1cc8) at nsViewManager.cpp:1441
#13 0x41d1238f in nsViewManager::RenderViews (this=0x8766040, 
    aRootView=0x42b402a0, aRC=@0x426f1cc8, aRect=@0xbfffef00, 
    aResult=@0xbfffef18) at nsViewManager.cpp:1365
#14 0x41d10e46 in nsViewManager::Refresh (this=0x8766040, aView=0x42b402a0, 
    aContext=0x426f1cc8, rect=0xbfffef98, aUpdateFlags=1)
    at nsViewManager.cpp:898
#15 0x41d13b43 in nsViewManager::DispatchEvent (this=0x8766040, 
    aEvent=0xbffff0bc, aStatus=0xbfffefdc) at nsViewManager.cpp:1960
#16 0x41d076d4 in HandleEvent (aEvent=0xbffff0bc) at nsView.cpp:67
#17 0x407f0e18 in nsWidget::DispatchEvent (this=0x42b40328, aEvent=0xbffff0bc, 
    aStatus=@0xbffff078) at nsWidget.cpp:1370
#18 0x407f0a5c in nsWidget::DispatchWindowEvent (this=0x42b40328, 
    event=0xbffff0bc) at nsWidget.cpp:1261
#19 0x407f6860 in nsWindow::DoPaint (this=0x42b40328, aX=0, aY=0, aWidth=733, 
    aHeight=512, aClipRegion=0x424c0af8) at nsWindow.cpp:748

Comment 1

[R.K.Aa.]

looks like a dup of bug 81119. Fix was just checked in.

Comment 2

[Stuart Parmenter]

yeah.  dup.  already fixed

*** This bug has been marked as a duplicate of 81119 ***