973798 - Crash in mozilla::gfx::DrawGradient on Mac OS X 10.6.8

Status: RESOLVED DUPLICATE of bug 973971

(Core :: Graphics, defect)

Description

[[:nmalkin]]

Unexpected behavior:
- Browser crashes when viewing web page.

Steps to reproduce:
- Navigate to https://wwws.mint.com/transaction.event while logged in to the site.
- (Crash reports suggest that this happens on other websites too.)

This behavior is consistent (i.e., it will always crash) and happens even when all extensions are disabled.

User agent:
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:30.0) Gecko/20100101 Firefox/30.0 ID:20140217030202 CSet: 2bddbd180d2d
(This is the latest Nightly build.)

This crash has happened over 100 times in the past month and appears to affect mostly Firefox 30, but also Firefox 27, exclusively on Mac OS X 10.6.8.
- https://crash-stats.mozilla.com/report/list?product=Firefox&signature=__kill#tab-reports

According to the stack trace, the culprit seems to be an (unhandled?) length error thrown in mozilla::gfx::DrawGradient, part of the XUL module.

Comment 1

[Markus Stange [:mstange]]

This might be the same as bug 928168. It would at least explain the Firefox 30 crashes, but not the 27 ones.