Closed Bug 66895 Opened 24 years ago Closed 24 years ago

Freeze or crash in function IL_GetNaturalDimensions

Categories

(Core :: Graphics: ImageLib, defect)

x86
All
defect
Not set
major

Tracking

()

VERIFIED FIXED
mozilla0.9.1

People

(Reporter: jlp.bugs, Assigned: pavlov)

References

()

Details

(Keywords: regression)

When I visit the page from the url in many cases Mozilla freezes. CPU usage is at about 100%. When it doesn't freeze, it crashes in the IL_GetNaturalDimensions function. Sometimes it loads correctly without a freeze or crash. Here is a log with stack trace report from Dr. Watson for Windows 2000: Application exception occurred: App: mozilla.exe (pid=1564) When: 29.1.2001 @ 11:21:16.779 Exception number: c0000005 (access violation) *----> System Information <----* Computer Name: NS User Name: Jure Number of Processors: 1 Processor Type: x86 Family 6 Model 4 Stepping 2 Windows 2000 Version: 5.0 Current Build: 2195 Service Pack: 1 Current Type: Uniprocessor Free Registered Organization: Home Registered Owner: Jure Repinc *----> Task List <----* 0 Idle.exe 8 System.exe 160 SMSS.exe 184 csrss.exe 204 WINLOGON.exe 232 services.exe 244 LSASS.exe 388 svchost.exe 420 spoolsv.exe 464 Apache.exe 484 Apache.exe 712 svchost.exe 728 FireDaemon.exe 744 Serv-U32.exe 756 control.exe 760 ssl32.dll.exe 788 pop3.exe 832 smtp.exe 876 regsvc.exe 900 mstask.exe 912 FireDaemon.exe 924 FireDaemon.exe 952 stisvc.exe 976 setiathome.exe 984 SETIQ.exe 316 WinMgmt.exe 1076 mspmspsv.exe 1092 DNS.exe 1248 svchost.exe 1480 explorer.exe 1460 devldr32.exe 1208 3dfxMan.exe 1476 TCAUDIAG.exe 1204 EM_EXEC.exe 928 Icq.exe 1568 getright.exe 1220 SetiSpy.exe 1576 naviscope.exe 1420 msimn.exe 1708 winamp.exe 1060 mirc32.exe 1832 iexplore.exe 1440 iexplore.exe 1564 mozilla.exe 1224 DRWTSN32.exe 0 _Total.exe (00400000 - 00455000) (77F80000 - 77FFA000) (60D10000 - 60D6C000) (60C70000 - 60C94000) (77DB0000 - 77E0A000) (77E80000 - 77F35000) (77D40000 - 77DB0000) (75050000 - 75058000) (75030000 - 75044000) (78000000 - 78046000) (75020000 - 75028000) (60CF0000 - 60CF6000) (60CE0000 - 60CE7000) (60C30000 - 60C39000) (69800000 - 69A42000) (77F40000 - 77F7C000) (77E10000 - 77E74000) (70BD0000 - 70C1C000) (71700000 - 7178A000) (77A50000 - 77B45000) (60B10000 - 60B5B000) (75E60000 - 75E7A000) (60A40000 - 60A6A000) (60D80000 - 60D8C000) (60080000 - 6009D000) (600C0000 - 600CC000) (60870000 - 6087B000) (60AC0000 - 60ADD000) (76B30000 - 76B6E000) (77570000 - 775A0000) (60A90000 - 60AB4000) (60AE0000 - 60AEC000) (60770000 - 607BA000) (60B60000 - 60BCC000) (60A70000 - 60A79000) (60A10000 - 60A2A000) (60740000 - 6074C000) (779B0000 - 77A45000) (691D0000 - 69255000) (77840000 - 7787C000) (770C0000 - 770E3000) (60660000 - 606AC000) (74FD0000 - 74FED000) (77340000 - 77353000) (77520000 - 77525000) (77320000 - 77337000) (75150000 - 7515F000) (75170000 - 751BF000) (77BE0000 - 77BEF000) (751C0000 - 751C6000) (77950000 - 77979000) (77980000 - 779A4000) (773B0000 - 773DE000) (77380000 - 773A2000) (77830000 - 7783E000) (77880000 - 7790D000) (77C10000 - 77C6D000) (774E0000 - 77512000) (774C0000 - 774D1000) (77530000 - 77552000) (77360000 - 77379000) (75010000 - 75017000) (60910000 - 6092B000) (609E0000 - 609F0000) (60110000 - 60123000) (60980000 - 6098C000) (60750000 - 60766000) (601C0000 - 60356000) (60820000 - 60828000) (600F0000 - 600FE000) (60360000 - 603A1000) (60860000 - 60867000) (606E0000 - 606EC000) (60460000 - 60469000) (60100000 - 6010A000) (60730000 - 6073A000) (60BD0000 - 60BE1000) (603B0000 - 603C4000) (77820000 - 77827000) (759B0000 - 759B6000) (50390000 - 50397000) (502E0000 - 502FD000) (50300000 - 50316000) (50420000 - 5052A000) (50220000 - 50227000) (503B0000 - 503BD000) (50250000 - 50267000) (503C0000 - 503CD000) (50020000 - 50128000) (77800000 - 7781D000) (501E0000 - 5021B000) (51000000 - 5104A000) (728A0000 - 728A6000) (10080000 - 10460000) (10460000 - 105B7000) (600A0000 - 600B4000) (604E0000 - 604E8000) (60050000 - 6007D000) (609A0000 - 609B1000) (603D0000 - 603E1000) (605E0000 - 60601000) (60C40000 - 60C63000) (606C0000 - 606C6000) (607F0000 - 607F6000) (60130000 - 60187000) (60840000 - 60846000) (604C0000 - 604DA000) (10000000 - 10008000) (60490000 - 60496000) State Dump for Thread Id 0x5a4 eax=00690072 ebx=153023b0 ecx=0000a4fa edx=1536db71 esi=00720054 edi=168bfff8 eip=60ae4155 esp=0012e940 ebp=0012e944 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202 function: IL_GetNaturalDimensions 60ae4143 5e pop esi 60ae4144 5b pop ebx 60ae4145 c9 leave 60ae4146 c3 ret 60ae4147 55 push ebp 60ae4148 8bec mov ebp,esp 60ae414a 56 push esi 60ae414b 8b35d082ae60 mov esi,[60ae82d0] ds:60ae82d0=168bfdb8 60ae4151 85f6 test esi,esi 60ae4153 7435 jz 60aecc8a FAULT ->60ae4155 8b4610 mov eax,[esi+0x10] ds:00f8d62a=???????? 60ae4158 3b450c cmp eax,[ebp+0xc] ss:0099bf1a=???????? 60ae415b 751f jnz 60af407c 60ae415d ff7520 push dword ptr [ebp+0x20] ss:0099bf1a=???????? 60ae4160 ff751c push dword ptr [ebp+0x1c] ss:0099bf1a=???????? 60ae4163 ff7518 push dword ptr [ebp+0x18] ss:0099bf1a=???????? 60ae4166 ff7514 push dword ptr [ebp+0x14] ss:0099bf1a=???????? 60ae4169 ff7510 push dword ptr [ebp+0x10] ss:0099bf1a=???????? 60ae416c ff7508 push dword ptr [ebp+0x8] ss:0099bf1a=???????? 60ae416f 56 push esi 60ae4170 e81a000000 call IL_GetNaturalDimensions+0x408 (60ae418f) 60ae4175 83c41c add esp,0x1c *----> Stack Back Trace <----* FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name 0012E944 60AE3EEC 00000000 AAF5D66B 1536DB48 00000000 img3250!IL_GetNaturalDimensions 0012E980 60AE3A42 153023B0 00000000 1536DB48 00000000 img3250!IL_GetNaturalDimensions 0012E9BC 60A942FA 1536DB48 00000000 168B6038 00000000 img3250!IL_GetImage 0012E9F4 60A9219B 153023B0 1536DB48 1532227C 00000000 gkgfxwin!NS_NewImageRenderer 0012EA28 601F4B74 1536DB48 1532227C 00000000 00000000 gkgfxwin!nsRect::operator= 0012EA58 601EECED 00000000 00000000 153026C8 15384650 gkhtml!NS_NewFrameImageLoader 0012EABC 6021E888 15322278 15384650 00000000 00000000 gkhtml!NS_NewStyleContext 0012EB94 6021E8DA 15055E10 153845F0 602AE4C2 15055E10 gkhtml!NS_NewFrameManager 0012EBA0 602AE4C2 15055E10 0012EC54 168B94A0 153845F0 gkhtml!NS_NewFrameManager (FPO: [2,0,1]) 0012ECEC 602AE5C8 15055E10 0012ED04 0012EDF8 601FB8FC gkhtml!NS_NewXMLDocument 0012ECFC 601FB8FC 00000000 15055E10 15055E10 153845F0 gkhtml!NS_NewXMLDocument 0012ED10 60217E3F 153845F0 15055E10 168B94A0 15055E10 gkhtml!nsTextFragment::CopyTo (FPO: [3,0,2]) 0012EDF8 602181B0 15384564 153845F0 168BD3D8 15386100 gkhtml!NS_NewFrameManager 0012EEF8 602181B0 00000000 15384564 0164A110 00000000 gkhtml!NS_NewFrameManager 0012EFF8 602183F0 00000000 153844D8 1536CC98 00000000 gkhtml!NS_NewFrameManager 0012F030 6025E666 15047010 15055E10 153844D8 00000000 gkhtml!NS_NewFrameManager 0012F10C 601C4DEF 15052A20 15055E10 00000000 00000000 gkhtml!NS_NewCSSStyleSheet 0012F12C 60209767 15022AA8 15055E10 15067548 00000000 gkhtml!NS_NewNameSpaceManager 0012F154 6078644D 1501D040 150441B8 15067548 00000000 gkhtml!NS_NewPresShell 0012F2C4 6079FA71 150441B8 15067548 00000000 150B5478 rdf!nsGetInterface::operator= 0012F478 6079C98B 00C35600 00000000 150B5478 00000001 rdf!NS_NewScriptXULDocument 0012F49C 60B80396 00000000 0012F4B8 00000000 017A21E8 rdf!NS_NewScriptXULDocument 0012F550 60B275A1 017A21E8 1506754C 00000001 168CD060 jsdom!NS_NewScriptCDATASection 0012F5FC 60B2C496 00000001 00000001 00000000 168CD044 js3250!js_Invoke 0012F760 60B275DF 017A21E8 0012F7EC 00000000 0012F8FC js3250!js_Invoke 0012F800 60A1BF45 00000001 00000002 00000002 15316330 js3250!js_Invoke 0012F9D4 60A1B194 1687DA48 02316330 00000007 153D41A8 xpc3250!<nosymbols> 0012F9EC 60D4181D 15316330 00000007 153D41A8 0012FA10 xpc3250!<nosymbols> (FPO: [4,0,0]) 0012FAA0 60D41727 153D41A8 00000007 0012FAC8 0012FAB8 xpcom!nsXPTCStubBase::Stub3 0012FABC 604E2CEC 15316330 153D26B8 000C0010 1530D31C xpcom!nsXPTCStubBase::Stub3 0012FAE4 60986C98 153039F4 1530D2FC 153D26B8 000C0010 mozbrwsr!nsProxyObjectCallInfo::operator= 0012FB0C 60986737 1530D2FC 153D26B8 000C0010 00000000 urildr!NSGetModule 0012FB28 60986670 153D26B8 00000000 1530D2E8 1530D378 urildr!NSGetModule (FPO: [2,0,2]) 0012FB54 60986599 00000000 80000000 1530D378 0012FBA0 urildr!NSGetModule 0012FB68 60666576 00000000 168A8D48 00000000 00000000 urildr!NSGetModule 0012FBA0 6068C82A 1530D2EC 00000000 00000000 00000000 necko!NSGetModule 0012FC30 60691ECB 15328270 00000000 60D4A9B0 168A8D48 necko!mktemp 0012FC8C 6066C859 0167A370 168B65AC 168A8D48 00000000 necko!nsProxyObjectCallInfo::GetMethodIndex 0012FCBC 6066C79F 0167A370 60D3F9D1 150AAEF4 00000000 necko!nsProxyObjectCallInfo::operator= 0012FCC4 60D3F9D1 150AAEF4 00000000 00B84538 60D3F93F necko!nsProxyObjectCallInfo::operator= (FPO: [1,0,0]) 0012FCD4 60D3F93F 150AAEF4 0012FDCC 0012FCFC 00B84538 xpcom!PL_HandleEvent (FPO: [1,0,2]) 0012FCEC 60D3FB9B 00B84538 0012FDD4 0012FD1C 77E148DC xpcom!PL_ProcessPendingEvents (FPO: [EBP 0x0012FDCC] [1,0,4]) 0012FE00 60085DC0 01611218 00401670 00B688A0 00000000 xpcom!PL_IsQueueNative 0012FE08 00401670 00B688A0 00000000 001337BB 00000000 appshell!nsQueryReferent::operator= (FPO: [1,0,0]) 0012FEF0 004011B8 00000001 00343A68 00343AA8 001337BB mozilla!nsGetInterface::operator= 0012FF18 00402AE2 00000001 00343A68 004047A0 00400000 mozilla!nsGetInterface::operator= 0012FF24 004047A0 00400000 00000000 001337BB 00000001 mozilla!nsGetInterface::operator= (FPO: [4,0,0]) 0012FFC0 77E992A6 00DACF38 0000028A 7FFDF000 C0000005 mozilla!nsGetInterface::operator= 0012FFF0 00000000 0040466C 00000000 000000C8 00000100 kernel32!GetCommandLineW *----> Raw Stack Dump <----* 0012e940 98 25 30 15 80 e9 12 00 - ec 3e ae 60 00 00 00 00 .%0......>.`.... 0012e950 6b d6 f5 aa 48 db 36 15 - 00 00 00 00 18 00 00 00 k...H.6......... 0012e960 00 00 00 00 00 00 00 00 - 48 db 36 15 f8 ff 8b 16 ........H.6..... 0012e970 98 25 30 15 b0 23 30 15 - 71 31 f5 aa 6b d6 f5 aa .%0..#0.q1..k... 0012e980 bc e9 12 00 42 3a ae 60 - b0 23 30 15 00 00 00 00 ....B:.`.#0..... 0012e990 48 db 36 15 00 00 00 00 - 02 00 00 00 18 00 00 00 H.6............. 0012e9a0 00 00 00 00 00 00 00 00 - 08 09 8c 16 1c 09 8c 16 ................ 0012e9b0 b0 23 30 15 18 00 00 00 - 00 00 00 00 f4 e9 12 00 .#0............. 0012e9c0 fa 42 a9 60 48 db 36 15 - 00 00 00 00 38 60 8b 16 .B.`H.6.....8`.. 0012e9d0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0012e9e0 98 25 30 15 7c 22 32 15 - 08 09 8c 16 c8 26 30 15 .%0.|"2......&0. 0012e9f0 7c 22 32 15 28 ea 12 00 - 9b 21 a9 60 b0 23 30 15 |"2.(....!.`.#0. 0012ea00 48 db 36 15 7c 22 32 15 - 00 00 00 00 00 00 00 00 H.6.|"2......... 0012ea10 00 00 00 00 00 00 00 00 - 98 25 30 15 48 db 36 15 .........%0.H.6. 0012ea20 78 22 32 15 00 00 00 00 - 58 ea 12 00 74 4b 1f 60 x"2.....X...tK.` 0012ea30 48 db 36 15 7c 22 32 15 - 00 00 00 00 00 00 00 00 H.6.|"2......... 0012ea40 00 00 00 00 00 00 00 00 - 00 00 00 80 10 5e 05 15 .............^.. 0012ea50 00 00 00 00 78 22 32 15 - bc ea 12 00 ed ec 1e 60 ....x"2........` 0012ea60 00 00 00 00 00 00 00 00 - c8 26 30 15 50 46 38 15 .........&0.PF8. 0012ea70 00 00 00 00 00 00 00 00 - f0 45 38 15 00 00 00 00 .........E8..... I'm using Mozilla 2001012820 on Windows 2000 SP1 on PC.
CCing pavlov@netscape.com. I was told that he is working on a new imagelib and should know more about this.
I can confirm this bug on Linux, using build 2001012906. Does not crash always as described...
OS: Windows 2000 → All
I also can confirm this on linux but at a different site (http://www.openuniverse.org/) This crashes everytime for me.
I tried with the site that Gregory mentioned and Mozilla behaves the same. I was also expiriencing this on http://www.amdzone.com/ yesterday (or two days ago) but can't see the problem today. Gregory also thinks it's a regression so I am adding the keyword and setting Severity to major. I'm also thinkking about adding keyward crash. Any comments about it?
Severity: normal → major
Keywords: regression
Is this the same problem as bug 66792?
*** Bug 67011 has been marked as a duplicate of this bug. ***
Depends on: 70938
Status: NEW → ASSIGNED
Target Milestone: --- → mozilla0.9.1
All pnunn bugs reassigned to Pav, who is taking over the imglib.
Assignee: pnunn → pavlov
Status: ASSIGNED → NEW
This code is no longer used. This bug has been fixed by the new image library.
Status: NEW → RESOLVED
Closed: 24 years ago
Resolution: --- → FIXED
Verified
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.