872606 - crash in mozilla::image::nsPNGDecoder::WriteInternal @ MOZ_PNG_push_proc_row

Status: RESOLVED WORKSFORME

(Core :: Graphics: ImageLib, defect)

Description

[Scoobidiver (away)]

It's #98 crasher in 20.0.1, and #58 in 21.0b8.
It seems to have slightly spiked since 23.0a1/20130506.

Signature 	mozilla::image::nsPNGDecoder::row_callback(png_struct_def*, unsigned char*, unsigned int, int) More Reports Search
UUID	cb8812eb-8bcb-4470-bce9-0ee8f2130515
Date Processed	2013-05-15 15:52:26
Uptime	34
Install Age	34 seconds since version was first installed.
Install Time	2013-05-15 15:40:46
Product	FennecAndroid
Version	24.0a1
Build ID	20130515031027
Release Channel	nightly
OS	Android
OS Version	0.0.0 Linux 3.0.31-1003885 #1 SMP PREEMPT Mon Mar 11 18:32:51 KST 2013 armv7l samsung/SGH-T989/SGH-T989:4.1.2/JZO54K/T989UVMC6:user/release-keys
Build Architecture	arm
Build Architecture Info	ARMv0
Crash Reason	SIGSEGV
Crash Address	0x60b00000
App Notes 	
AdapterDescription: 'Qualcomm -- Adreno (TM) 220 -- OpenGL ES 2.0 V@2.1 AU@ (CL@) -- Model: SGH-T989, Product: SGH-T989, Manufacturer: samsung, Hardware: qcom'
GL Layers! EGL? EGL+ GL Context? GL Context+ GL Layers+ 
samsung SGH-T989
samsung/SGH-T989/SGH-T989:4.1.2/JZO54K/T989UVMC6:user/release-keys
Processor Notes 	sp-processor10_phx1_mozilla_com_12716:2012; non-integer value of "SecondsSinceLastCrash"; exploitability tool: ERROR: unable to analyze dump
EMCheckCompatibility	True
Adapter Vendor ID	Qualcomm
Adapter Device ID	Adreno (TM) 220
Device	samsung SGH-T989
Android API Version	16 (REL)
Android CPU ABI	armeabi-v7a

Frame 	Module 	Signature 	Source
0 	libz.so 	libz.so@0xcae8 	
1 	libxul.so 	mozilla::image::nsPNGDecoder::row_callback 	image/decoders/nsPNGDecoder.cpp:803
2 	libz.so 	libz.so@0x12266 	
3 	libz.so 	libz.so@0x1233a 	
4 	libz.so 	libz.so@0x1228a 	
5 	libxul.so 	MOZ_PNG_push_proc_row 	media/libpng/pngpread.c:1372
6 	libxul.so 	MOZ_PNG_proc_IDAT_data 	media/libpng/pngpread.c:1087
7 	libxul.so 	MOZ_PNG_push_read_IDAT 	media/libpng/pngpread.c:1012
8 	dalvik-mark-stack (deleted) 	dalvik-mark-stack @0x258a447 	
9 	libxul.so 	MOZ_PNG_process_data 	media/libpng/pngpread.c:40
10 	libxul.so 	mozilla::image::nsPNGDecoder::WriteInternal 	image/decoders/nsPNGDecoder.cpp:357
11 	libxul.so 	mozilla::image::Decoder::Write 	image/src/Decoder.cpp:115
12 	libxul.so 	mozilla::image::RasterImage::WriteToDecoder 	image/src/RasterImage.cpp:2691
13 	libxul.so 	mozilla::image::Decoder::SpeedHistogram 	image/src/Decoder.h:148
14 	libxul.so 	mozilla::image::RasterImage::DecodePool::DecodeSomeOfImage 	image/src/RasterImage.cpp:3833
15 	libxul.so 	mozilla::image::RasterImage::DecodePool::DecodeABitOf 	image/src/RasterImage.cpp:3634
16 	libxul.so 	mozilla::image::RasterImage::RequestDecodeCore 	image/src/RasterImage.cpp:2843
...

More reports at:
https://crash-stats.mozilla.com/report/list?signature=mozilla%3A%3Aimage%3A%3AnsPNGDecoder%3A%3Arow_callback%28png_struct_def*%2C+unsigned+char*%2C+unsigned+int%2C+int%29
https://crash-stats.mozilla.com/report/list?signature=MOZ_PNG_push_proc_row

Comment 1

[Rob]

I was able to trigger this Bug using Google Maps (not Streetview, did not get to zoom in that far) in Desktop Mode.

Comment 2

[Rob]

(In reply to Scoobidiver (away) from comment #0)
> It's #98 crasher in 20.0.1, and #58 in 21.0b8.
> It seems to have slightly spiked since 23.0a1/20130506.
> ...
> > ...
> 
> More reports at:
> https://crash-stats.mozilla.com/report/
> list?signature=mozilla%3A%3Aimage%3A%3AnsPNGDecoder%3A%3Arow_callback%28png_s
> truct_def*%2C+unsigned+char*%2C+unsigned+int%2C+int%29
> https://crash-stats.mozilla.com/report/list?signature=MOZ_PNG_push_proc_row

Unfortunatley those two URLs do not show Android Crashes and the reported Platform is "ARM Android". Mozilla Crash Reports is showing OSes as "WinXP W7 and Linux" and the Arch'es as "Arm, X86 and X64"; that needs fixing.

Here is an Android BP: bp-2534dcab-859c-41d7-bbbe-cb7482140327 .

That BP is for "FennecAndroid 31.0a1 Crash Report [@ mozilla::image::nsPNGDecoder::row_callback(png_struct_def*, unsigned char*, unsigned int, int) ]" but the "Related Bugs" Section of the MCR says:

"872606 NEW --- crash in mozilla::image::nsPNGDecoder::WriteInternal @ MOZ_PNG_push_proc_row" so here I am. 

It seems like the "Related Bugs" suggestion has quite a bit of lattitude of where you are sent. In another Report someone replied that I had posted my BPs in the wrong Report. Indeed when I checked the Bug # had changed, but not to what they had said where I should have gone. Something broken there too ?

Comment 3

[nemo]

https://crash-stats.mozilla.com/report/index/2cd375dd-b032-40fc-a319-739772140808
Encountered on http://arewecompressedyet.com/
Saw no graphs in android stable 34. Tried switching from Total chart to a few others, stayed blank.
Switched to view desktop site, tried same, crashed.

Comment 4

[nemo]

BTW, nothing was visible just because it wasn't obvious how to use the interface when laid out as it was on the phone.  I hadn't touched any of the runs to chart.  Perhaps what triggered the crash was accidentally touching a run, loading a png.

(ugh. sorry, did it again - story box is where comment box used to be, when using w3m, keep putting comments there)

Comment 5

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.