Solaris 2.6, gcc 2.7.2.3, purify. this started happening after ramiro's changes to make image rendering so much faster. **** Purify instrumented ./apprunner.pure (pid 10892) **** UMR: Uninitialized memory read (5040 times): * This is occurring while in: gdk_rgb_convert_8_d [gdkrgb.c:1107] gdk_draw_rgb_image_core [gdkrgb.c:3007] gdk_draw_rgb_image [gdkrgb.c:3036] nsImageGTK::Draw(nsIRenderingContext&,void*,int,int,int,int) [nsImageGTK.cpp:468] nsRenderingContextGTK::DrawImage(nsIImage*,const nsRect&) [nsRenderingContextGTK.cpp:1356] nsImageFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsImageFrame.cpp:780] nsContainerFrame::PaintChild(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsIFrame*,nsFramePaintLayer) [nsContainerFrame.cpp:293] nsBlockFrame::PaintChildren(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsBlockFrame.cpp:4801] nsBlockFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsBlockFrame.cpp:4736] nsAreaFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsAreaFrame.cpp:221] nsContainerFrame::PaintChild(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsIFrame*,nsFramePaintLayer) [nsContainerFrame.cpp:293] nsContainerFrame::PaintChildren(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsContainerFrame.cpp:233] nsTableCellFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsTableCellFrame.cpp:204] nsTableRowFrame::PaintChildren(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsTableRowFrame.cpp:348] nsTableRowFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsTableRowFrame.cpp:304] nsTableRowGroupFrame::PaintChildren(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsTableRowGroupFrame.cpp:288] nsTableRowGroupFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsTableRowGroupFrame.cpp:246] nsContainerFrame::PaintChild(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsIFrame*,nsFramePaintLayer) [nsContainerFrame.cpp:293] nsContainerFrame::PaintChildren(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsContainerFrame.cpp:233] nsTableFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsTableFrame.cpp:2319] nsContainerFrame::PaintChild(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsIFrame*,nsFramePaintLayer) [nsContainerFrame.cpp:293] nsContainerFrame::PaintChildren(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsContainerFrame.cpp:233] nsTableOuterFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsTableOuterFrame.cpp:216] nsContainerFrame::PaintChild(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsIFrame*,nsFramePaintLayer) [nsContainerFrame.cpp:293] nsBlockFrame::PaintChildren(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsBlockFrame.cpp:4801] nsBlockFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsBlockFrame.cpp:4736] nsContainerFrame::PaintChild(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsIFrame*,nsFramePaintLayer) [nsContainerFrame.cpp:293] nsBlockFrame::PaintChildren(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsBlockFrame.cpp:4801] nsBlockFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsBlockFrame.cpp:4736] nsAreaFrame::Paint(nsIPresContext&,nsIRenderingContext&,const nsRect&,nsFramePaintLayer) [nsAreaFrame.cpp:221] * Reading 1 byte from 0x1095d81 in the heap. * Address 0x1095d81 is 16201 bytes into a malloc'd block at 0x1091e38 of 23760 bytes. * This block was allocated from: malloc [rtlib.o] __bUiLtIn_nEw [libgcc.a] __builtin_new [rtlib.o] __bUiLtIn_vEc_nEw [libgcc.a] __builtin_vec_new [rtlib.o] nsImageGTK::Init(int,int,int,nsMaskRequirements) [nsImageGTK.cpp:139] ImageRendererImpl::NewPixmap(void*,int,int,_NI_Pixmap*,_NI_Pixmap*) [nsImageRenderer.cpp:102] il_size(il_container_struct*) [if.cpp:607] il_gif_write(il_container_struct*,const unsigned char*,int) [gif.cpp:1273] IL_StreamWrite(il_container_struct*,const unsigned char*,int) [if.cpp:809] NetReaderImpl::Write(const unsigned char*,int) [ilNetReader.cpp:92] ImageConsumer::OnDataAvailable(nsIURL*,nsIInputStream*,unsigned int) [nsImageNetContextAsync.cpp:233] nsDocumentBindInfo::OnDataAvailable(nsIURL*,nsIInputStream*,unsigned int) [nsDocLoader.cpp:1966] stub_put_block(_NET_StreamClass*,const char*,int) [nsStubContext.cpp:827] net_MemoryCacheLoad [mkmemcac.c:1443] NET_GetURL [mkgeturl.c:2979] NET_ProcessNet [mkgeturl.c:3375] NET_PollSockets [mkselect.c:320] nsNetlibService::NetPollSocketsCallback(nsITimer*,void*) [nsNetService.cpp:1277] TimerImpl::FireTimeout() [nsTimer.cpp:73] nsTimerExpired [nsTimer.cpp:189] g_timeout_dispatch [gmain.c:1147] g_main_dispatch [gmain.c:647] g_main_iterate [gmain.c:854] g_main_run [gmain.c:912] gtk_main [gtkmain.c:475] nsAppShell::Run() [nsAppShell.cpp:208] nsAppShellService::Run() [nsAppShellService.cpp:186] main [nsAppRunner.cpp:337] _start [crt1.o]

marking assigned

Pollmann - one of these is yours. Do you think we can get most of these UMR, etc bugs fixed for M6?

moving non-functionality bugs to M7

Marking M8. If you plan to fix any of these for m7, mark them so.

Bruce, is there a test case e.g., some specific URL that triggers this?

mass-moving all m12 bugs to m13

i think this is a solaris xlib bug too, but i will keep it until i have time to dig through all of this code too.

Mass-moving most M15 bugs to M16

mass-moving all bugs to m21 that are not dofood+, or nsbeta2+

LXR doesn't show any files containing gdk_rgb_convert_8_d: http://lxr.mozilla.org/mozilla/search?string=gdk_rgb_convert_8_d Not even gdkrgb.c seems to exist anymore. Marking invalid.