Open Bug 570367 Opened 14 years ago Updated 2 years ago

collection of images processing stacks that lead to crashes

Categories

(Core :: Graphics: ImageLib, defect)

x86
Windows XP
defect

Tracking

()

People

(Reporter: chofmann, Unassigned)

Details

Attachments

(2 files)

looks like there might be a family of crash stacks that all have some similar elements and a possible indication of corruption that happens deeper in getting the images off the network or later processing.  Here are the signatures and link to stacks.  I'll also post a spreadsheet that lines up the stacks.

are there crash defenses we could insert in any of this code or ways to figure out if there is a single deeper root cause?  the total of all these might add up to hundereds of crashes per week/day.

[@ _CIpow_pentium4 ] 
http://crash-stats.mozilla.com/report/index/9a9912a7-5678-47fd-9d1e-f57582100604
http://crash-stats.mozilla.com/report/list?signature=_CIpow_pentium4
35

[@ PNGGetColorProfile ] 
http://crash-stats.mozilla.com/report/index/f2125744-61e8-4b33-9717-86eda2100604
http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=contains&query=PNGGetColorProfile&date=06%2F05%2F2010%2016%3A12%3A31&range_value=1&range_unit=weeks&hang_type=any&process_type=any&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&signature=PNGGetColorProfile
2

[@ info_callback ] 
http://crash-stats.mozilla.com/report/index/59418aad-b156-453e-91e3-60e502100605
http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=contains&query=info_callback&date=06%2F05%2F2010%2016%3A13%3A51&range_value=1&range_unit=weeks&hang_type=any&process_type=any&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&signature=info_callback
27

[@ MOZ_PNG_push_have_info ] 
http://crash-stats.mozilla.com/report/index/5f0e4fcb-8bbf-43d8-8c8c-21ad42100604
http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=contains&query=MOZ_PNG_push_have_info&date=06%2F05%2F2010%2016%3A14%3A59&range_value=1&range_unit=weeks&hang_type=any&process_type=any&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&signature=MOZ_PNG_push_have_info
2

[@ MOZ_PNG_push_read_chunk ]
http://crash-stats.mozilla.com/report/index/b7b4c368-0ba6-4554-90d8-0f61d2100605
http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=contains&query=MOZ_PNG_push_read_chunk&date=06%2F05%2F2010%2016%3A16%3A34&range_value=1&range_unit=weeks&hang_type=any&process_type=any&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&signature=MOZ_PNG_push_read_chunk
46

[@ MOZ_PNG_proc_some_data ] 
http://crash-stats.mozilla.com/report/index/d7fc5a53-4189-4fba-aeff-f7f0e2100604
http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=contains&query=MOZ_PNG_proc_some_data&date=06%2F05%2F2010%2016%3A18%3A55&range_value=1&range_unit=weeks&hang_type=any&process_type=any&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&signature=MOZ_PNG_proc_some_data
16

[@ ReadDataOut ] 
http://crash-stats.mozilla.com/report/index/c59a7983-6000-4575-ba03-40b1f2100605
http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=contains&query=ReadDataOut&date=06%2F05%2F2010%2016%3A21%3A52&range_value=1&range_unit=weeks&hang_type=any&process_type=any&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&signature=ReadDataOut
35

[@ ReadDataOut ] 
http://crash-stats.mozilla.com/report/index/c59a7983-6000-4575-ba03-40b1f2100605
another example of above

problems might go deeper but I've only traced this deep so far.
Summary: collection if images processing stacks that lead to crashes → collection of images processing stacks that lead to crashes
here are counts of the signatures above and other similar for May and June to date

 181 _CIpow_pentium4

  12 PNGGetColorProfile

 103 info_callback
   3 @0x0 | info_callback

  17 MOZ_PNG_push_have_info
   4 @0x0 | MOZ_PNG_push_have_info
   1 nsCOMPtr_base::assign_assuming_AddRef(nsISupports*) | MOZ_PNG_push_have_info

 177 MOZ_PNG_push_read_chunk
  10 memcmp | MOZ_PNG_push_read_chunk
   4 memcpy_s | MOZ_PNG_push_read_chunk
   1 @0x0 | MOZ_PNG_push_read_chunk

 115 MOZ_PNG_proc_some_data
  10 @0x0 | MOZ_PNG_proc_some_data
   1 memcpy | MOZ_PNG_proc_some_data

  17 MOZ_PNG_process_data

 188 ReadDataOut
  35 @0x0 | ReadDataOut
  31 nsCOMPtr_base::assign_assuming_AddRef(nsISupports*) | ReadDataOut
   2 PL_DHashTableOperate | ReadDataOut
   2 @0x0 | ReadDataOut(nsIInputStream*, void*, char const*, unsigned int, unsigned int, unsigned int*)
Glenn, not sure if anything jumps out at you with this...
I'm seeing some users with what looks like repeated, and start up crashes with no urls on these signatures as well with comments like this:

1 second after startup
133 seconds after last crash
firefox 3.6.3 _
signature CIpow_pentium4  
comment: i cant use my mozzila firefox ! can you fix it right now thanks .


1 sec. after start
8 since last crash
3.5.7 
ReadDataOut  
it didn't even start!? WTF??

I wonder if some kind of cache corruption could be involved.
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: