851030 - crash in imgFrame::ImageUpdated

Status: RESOLVED INCOMPLETE

(Core :: Graphics: ImageLib, defect)

Description

[Scoobidiver (away)]

A user crashed several times with B2G 18.0/20130306.

Here is a crash report: bp-8c5d611d-71af-44e9-abba-bb4d62130313.
Frame 	Module 	Signature 	Source
0 	libxul.so 	imgFrame::ImageUpdated 	BaseRect.h:69
1 	libxul.so 	mozilla::image::RasterImage::FrameUpdated 	RasterImage.cpp:1309
2 	libxul.so 	mozilla::image::Decoder::FlushInvalidations 	Decoder.cpp:152
3 	libxul.so 	mozilla::image::Decoder::PostFrameStop 	Decoder.cpp:241
4 	libxul.so 	mozilla::image::nsJPEGDecoder::NotifyDone 	nsJPEGDecoder.cpp:531
5 	libxul.so 	mozilla::image::term_source 	nsJPEGDecoder.cpp:850
6 	libxul.so 	jpeg_finish_decompress 	jdapimin.c:391
7 	libxul.so 	mozilla::image::nsJPEGDecoder::WriteInternal 	nsJPEGDecoder.cpp:502
8 	libxul.so 	mozilla::image::Decoder::Write 	Decoder.cpp:80
9 	libxul.so 	mozilla::image::RasterImage::WriteToDecoder 	RasterImage.cpp:2491
10 	libxul.so 	mozilla::image::RasterImage::DecodeSomeData 	RasterImage.cpp:3086
11 	libxul.so 	mozilla::image::RasterImage::DecodeWorker::DecodeSomeOfImage 	RasterImage.cpp:3397
12 	libxul.so 	mozilla::image::RasterImage::DecodeWorker::Run 	RasterImage.cpp:3322
13 	libxul.so 	nsThread::ProcessNextEvent 	nsThread.cpp:620
14 	libxul.so 	NS_ProcessNextEvent_P 	nsThreadUtils.cpp:237
15 	libxul.so 	mozilla::ipc::MessagePump::Run 	MessagePump.cpp:82
16 	libxul.so 	mozilla::ipc::MessagePumpForChildProcess::Run 	MessagePump.cpp:231
17 	libxul.so 	MessageLoop::RunInternal 	message_loop.cc:216
18 	libxul.so 	MessageLoop::Run 	message_loop.cc:209
19 	libxul.so 	nsBaseAppShell::Run 	nsBaseAppShell.cpp:163
20 	libxul.so 	XRE_RunAppShell 	nsEmbedFunctions.cpp:646
21 	libxul.so 	mozilla::ipc::MessagePumpForChildProcess::Run 	MessagePump.cpp:198
22 	libxul.so 	MessageLoop::RunInternal 	message_loop.cc:216
23 	libxul.so 	MessageLoop::Run 	message_loop.cc:209
24 	libxul.so 	XRE_InitChildProcess 	nsEmbedFunctions.cpp:485
25 	plugin-container 	main 	ipc/app/MozillaRuntimeMain.cpp:48
26 	libc.so 	__libc_init 	libc_init_dynamic.c:114
27 		@0xb0001dc5 	

More reports at:
https://crash-stats.mozilla.com/report/list?signature=imgFrame%3A%3AImageUpdated

Comment 1

[bhavana bajaj [:bajaj]]

Without STR here and since this is not an exploitable crash, not a blocker

Comment 2

[u279076]

Closing this as incomplete. Although this bug is filed against B2G I see these crashes being reported on Android, however these crashes are all on Fennec 32 or earlier. I don't know what impact if any this has on B2G as it currently exists for connected devices. However without reports there's nothing we can do.

Please reopen if this is reproducible with current builds.