[cairo-bugs] [Bug 15688] New: crash in libpixman

[bugzilla-daemon at freedesktop.org]

http://bugs.freedesktop.org/show_bug.cgi?id=15688

           Summary: crash in libpixman
           Product: cairo
           Version: 1.6.5
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: medium
         Component: image backend
        AssignedTo: cworth at cworth.org
        ReportedBy: otte at gnome.org
         QAContact: cairo-bugs at cairographics.org


Here's a crash I just had in Epiphany. This is with git master pixman and cairo
from yesterday when visiting http://www.readmore.de:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb69ae720 (LWP 25899)]
0xb72ccfe1 in coreCombineReverseInUsse2 (pd=0xbfcfe850, ps=0xbfcfe9c8, w=44) at
pixman-sse.c:722
722             xmmDstHi = load128Aligned ((__m128i*) pd);
(gdb) where
#0  0xb72ccfe1 in coreCombineReverseInUsse2 (pd=0xbfcfe850, ps=0xbfcfe9c8,
w=44) at pixman-sse.c:722
#1  0xb72ccf3f in sse2CombineMaskU (dst=0xbfcfe844, src=0xbfcfe9bc, width=47)
at pixman-sse.c:2112
#2  0xb7240977 in pixman_composite_rect_general_no_accessors (data=0xbfd04844,
scanline_buffer=0xbfcfe844) at pixman-compose.c:394
#3  0xb7240bd5 in pixman_composite_rect_general (data=0xbfd04844,
scanline_buffer=0xbfcfe844) at pixman-compose.c:453
#4  0xb7245c36 in pixman_image_composite_rect (op=PIXMAN_OP_OVER,
src=0x97a8f50, mask=0x96f9bd8, dest=0x93a49e0, src_x=0, src_y=28, mask_x=0, 
    mask_y=0, dest_x=0, dest_y=28, width=47, height=19) at pixman-pict.c:1308
#5  0xb7245a54 in pixman_walk_composite_region (op=PIXMAN_OP_OVER,
pSrc=0x97a8f50, pMask=0x96f9bd8, pDst=0x93a49e0, xSrc=0, ySrc=28, xMask=0, 
    yMask=0, xDst=0, yDst=28, width=47, height=19, srcRepeat=0, maskRepeat=0,
compositeRect=0xb7245ac5 <pixman_image_composite_rect>)
    at pixman-pict.c:1246
#6  0xb7246477 in pixman_image_composite (op=PIXMAN_OP_OVER, pSrc=0x97a8f50,
pMask=0x96f9bd8, pDst=0x93a49e0, xSrc=0, ySrc=28, xMask=0, yMask=0, 
    xDst=0, yDst=28, width=47, height=19) at pixman-pict.c:1878
#7  0xb74b7335 in _cairo_image_surface_composite_trapezoids
(op=CAIRO_OPERATOR_OVER, pattern=0x96f99f8, abstract_dst=0x97b6618, 
    antialias=CAIRO_ANTIALIAS_DEFAULT, src_x=0, src_y=28, dst_x=0, dst_y=28,
width=47, height=19, traps=0x97a8a48, num_traps=20)
    at cairo-image-surface.c:1158
#8  0xb74c654c in _cairo_surface_composite_trapezoids (op=CAIRO_OPERATOR_OVER,
pattern=0x96f99f8, dst=0x97b6618, antialias=CAIRO_ANTIALIAS_DEFAULT, 
    src_x=0, src_y=28, dst_x=0, dst_y=28, width=47, height=19, traps=0x97a8a48,
num_traps=20) at cairo-surface.c:1664
#9  0xb74c84bc in _composite_traps_draw_func (closure=0xbfd05640,
op=CAIRO_OPERATOR_OVER, src=0x96f99f8, dst=0x97b6618, dst_x=0, dst_y=0, 
    extents=0xbfd05618) at cairo-surface-fallback.c:501
#10 0xb74c80a2 in _clip_and_composite (clip=0x0, op=CAIRO_OPERATOR_OVER,
src=0x96f99f8, draw_func=0xb74c8398 <_composite_traps_draw_func>, 
    draw_closure=0xbfd05640, dst=0x97b6618, extents=0xbfd05618) at
cairo-surface-fallback.c:395
#11 0xb74c88a8 in _clip_and_composite_trapezoids (src=0x96f99f8,
op=CAIRO_OPERATOR_OVER, dst=0x97b6618, traps=0xbfd05694, clip=0x0, 
    antialias=CAIRO_ANTIALIAS_DEFAULT) at cairo-surface-fallback.c:660
#12 0xb74c904b in _cairo_surface_fallback_fill (surface=0x97b6618,
op=CAIRO_OPERATOR_OVER, source=0x96f99f8, path=0x923b184, 
    fill_rule=CAIRO_FILL_RULE_EVEN_ODD, tolerance=0.10000000000000001,
antialias=CAIRO_ANTIALIAS_DEFAULT) at cairo-surface-fallback.c:904
#13 0xb74c63f7 in _cairo_surface_fill (surface=0x97b6618,
op=CAIRO_OPERATOR_OVER, source=0xbfd057ac, path=0x923b184, 
    fill_rule=CAIRO_FILL_RULE_EVEN_ODD, tolerance=0.10000000000000001,
antialias=CAIRO_ANTIALIAS_DEFAULT) at cairo-surface.c:1624
#14 0xb74b3475 in _cairo_gstate_fill (gstate=0x96f9898, path=0x923b184) at
cairo-gstate.c:1009
#15 0xb74aa813 in *INT_cairo_fill_preserve (cr=0x923b008) at cairo.c:2177
#16 0xb74aa7db in cairo_fill (cr=0x923b008) at cairo.c:2153
#17 0xb417125e in ?? () from /usr/lib/librsvg-2.so.2
#18 0x0923b008 in ?? ()
...

PS: pixman needs its own product.


-- 
Configure bugmail: http://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.