The URL http://www.lbpr0n.com/faq.html crashes a CVS build from a few hours ago: Gdk-ERROR **: BadMatch (invalid parameter attributes) serial 7304 error_code 8 request_code 73 minor_code 0 followed by mozilla quitting with exit code 1. I can't get a backtrace - gdb doesn't stop at the gdk-error. My build has libpr0n enabled - bryner's non-libpr0n linux build doesn't crash.

*** Bug 73908 has been marked as a duplicate of this bug. ***

for pav....

this works ok for me in my build. if it still happens for you, try applying the patches in bug 73161 and see if they still happen.

Reopening. This still happens with current CVS (which apparently includes your patch) I did rm -rf on the NewCache dir, so thats not the problem. gtk+-1.2.8-7_helix_1, if that matters.

If I break on gdk_x_error, I can see that it stops while rendering the top left image, and in fact its that image that causes the crash. Updating URL. back trace: #0 0x4082b2c6 in gdk_x_error () from /usr/lib/libgdk-1.2.so.0 #1 0x408b1ecd in _XError () from /usr/X11R6/lib/libX11.so.6 #2 0x408b054d in _XReply () from /usr/X11R6/lib/libX11.so.6 #3 0x4089a17a in XGetImage () from /usr/X11R6/lib/libX11.so.6 #4 0x40d15a5f in nsImageGTK::DrawComposited (this=0x875e4e8, aContext=@0x87dec58, aSurface=0x824c428, aSX=0, aSY=102, aDX=8, aDY=110, aWidth=400, aHeight=-58) at nsImageGTK.cpp:933 #5 0x40d0c568 in nsImageGTK::Draw (this=0x875e4e8, aContext=@0x87dec58, aSurface=0x824c428, aSX=0, aSY=102, aSWidth=400, aSHeight=-58, aDX=8, aDY=110, aDWidth=400, aDHeight=98) at nsImageGTK.cpp:511 #6 0x40035d44 in nsRenderingContextImpl::DrawImage (this=0x87dec58, aImage=0x87b5570, aSrcRect=0xbfffd9b0, aDestPoint=0xbfffd9c0) at ../../dist/include/nsCOMPtr.h:648 #7 0x4164f73b in nsImageFrame::Paint (this=0x85e9918, aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, aDirtyRect=@0xbfffda90, aWhichLayer=eFramePaintLayer_Overlay) at ../../../../dist/include/nsCOMPtr.h:641 #8 0x4162c75d in nsContainerFrame::PaintChild (this=0x85e98cc, aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, aDirtyRect=@0xbfffdf10, aFrame=0x85e9918, aWhichLayer=eFramePaintLayer_Overlay) at nsContainerFrame.cpp:206 #9 0x41626ca1 in nsBlockFrame::PaintChildren (this=0x85e98cc, aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, aDirtyRect=@0xbfffdf10, aWhichLayer=eFramePaintLayer_Overlay) at nsBlockFrame.cpp:6572 #10 0x416269b7 in nsBlockFrame::Paint (this=0x85e98cc, aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, aDirtyRect=@0xbfffdf10, aWhichLayer=eFramePaintLayer_Overlay) at nsBlockFrame.cpp:6449 #11 0x4162c75d in nsContainerFrame::PaintChild (this=0x85e9880, aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, aDirtyRect=@0xbfffe390, aFrame=0x85e98cc, aWhichLayer=eFramePaintLayer_Overlay) at nsContainerFrame.cpp:206 #12 0x41626ca1 in nsBlockFrame::PaintChildren (this=0x85e9880, aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, aDirtyRect=@0xbfffe390, aWhichLayer=eFramePaintLayer_Overlay) at nsBlockFrame.cpp:6572 #13 0x416269b7 in nsBlockFrame::Paint (this=0x85e9880, aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, aDirtyRect=@0xbfffe390, aWhichLayer=eFramePaintLayer_Overlay) at nsBlockFrame.cpp:6449 #14 0x4162c75d in nsContainerFrame::PaintChild (this=0x85e9834, aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, aDirtyRect=@0xbfffe810, aFrame=0x85e9880, aWhichLayer=eFramePaintLayer_Overlay) at nsContainerFrame.cpp:206 #15 0x41626ca1 in nsBlockFrame::PaintChildren (this=0x85e9834, aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, aDirtyRect=@0xbfffe810, aWhichLayer=eFramePaintLayer_Overlay) at nsBlockFrame.cpp:6572 #16 0x416269b7 in nsBlockFrame::Paint (this=0x85e9834, aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, aDirtyRect=@0xbfffe810, aWhichLayer=eFramePaintLayer_Overlay) at nsBlockFrame.cpp:6449 #17 0x4162c75d in nsContainerFrame::PaintChild (this=0x8764834, aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, aDirtyRect=@0xbfffea80, aFrame=0x85e9834, aWhichLayer=eFramePaintLayer_Overlay) at nsContainerFrame.cpp:206 #18 0x4162c629 in nsContainerFrame::PaintChildren (this=0x8764834, aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, aDirtyRect=@0xbfffea80, aWhichLayer=eFramePaintLayer_Overlay) at nsContainerFrame.cpp:151 #19 0x41644cfa in nsHTMLContainerFrame::Paint (this=0x8764834, aPresContext=0x86ab1f8, aRenderingContext=@0x87dec58, aDirtyRect=@0xbfffea80, aWhichLayer=eFramePaintLayer_Overlay) at nsHTMLContainerFrame.cpp:106 #20 0x4167b7ce in PresShell::Paint (this=0x86b0758, aView=0x8759578, aRenderingContext=@0x87dec58, aDirtyRect=@0xbfffea80) at ../../../../dist/include/nsCOMPtr.h:641 etc. I'm building with -O2 - could that be the problem? Those -ve heights look strange though. Actually, there was one time where it didn't crash, but shift-reload caused it to die again.

Negative heights shouldn't happen - pavlov?

This also occurs on http://www.gnome.org/

changing summary so it makes sense...

WIN98SE, Mozilla 2001040304. This bug is affecting Windows, too. Load http://www.libpr0n.com/faq.png and "shift+reload" couple times and quickly at row. MOZILLA caused an invalid page fault in module GKGFXWIN.DLL at 0167:60b74ae2. Registers: EAX=0222d5dc CS=0167 EIP=60b74ae2 EFLGS=00010206 EBX=00000190 SS=016f ESP=0068f1a4 EBP=0068f1c8 ECX=000000ff DS=016f ESI=830ba000 FS=2a4f EDX=021f2bd0 ES=016f EDI=00000000 GS=0000 Bytes at CS:EIP: 0f b6 18 c7 45 18 ff 00 00 00 0f af df 29 7d 18 Stack dump: bff222ca bff224fe 00cc0020 000004b0 019f2360 0000108e 00000000 0000007c 830ba000 0068f22c 60b74c30 00000190 00000000 fffffff7 00000190 0000007c

wfm using a linux debug build from noon today, as well as a 2001.04.12.08 verif build.

worksforme as well with a 2001-04-17 debug build

Verified linux build 2001082012