[webkit-dev] divide by zero in cairo_fill

[zaheer ahmad]

hi,
iam working gtk port of webkit and when opening certain pages (www.ndtv.com,
www.cricinfo.com) i see a random crash due to a divide by zero in cairo. The
backtrace looks like following

Iam using 26699 and this issue could be fixed in later version. search in
webkit bug list does not give any matching bug.

Any inputs would be very helpful.

thanks,
Zaheer

#0  0xb5dc26a1 in kill () from /lib/libc.so.6
#1  0xb772c917 in pthread_kill () from /lib/libpthread.so.0
#2  0xb772cc82 in raise () from /lib/libpthread.so.0
#3  0xb777bdb5 in signal_handler () from /usr/local/lib/libdirect-1.0.so.0
#4  0xb772f5be in __pthread_sighandler_rt () from /lib/libpthread.so.0
#5  <signal handler called>
#6  0xb7a34154 in fbFetchTransformed (pict=0x874c738, x=37879808, y=0,
width=150, buffer=0xbfafa0e0, mask=0x0, maskBits=4278190080)
    at fbcompose.c:3445
#7  0xb7a3596d in pixman_compositeGeneral (op=3215958208, pSrc=0x874c738,
pMask=0x0, pDst=0x88829b8, xSrc=578, ySrc=175, xMask=0, yMask=0,
    xDst=578, yDst=175, width=0, height=249) at fbcompose.c:4196
#8  0xb7a22910 in _cairo_pixman_composite (op=PIXMAN_OPERATOR_SRC,
pSrc=0x874c738, pMask=0x0, pDst=0x88829b8, xSrc=578, ySrc=175, xMask=0,
    yMask=0, xDst=578, yDst=175, width=150, height=249) at fbpict.c:1928
#9  0xb79ea7ba in _cairo_image_surface_composite (op=CAIRO_OPERATOR_SOURCE,
src_pattern=0xbfb00630, mask_pattern=0x0,
    abstract_dst=0x83f6e18, src_x=578, src_y=175, mask_x=578, mask_y=175,
dst_x=578, dst_y=175, width=150, height=249)
    at cairo-image-surface.c:857
#10 0xb79f45f8 in _cairo_surface_composite (op=CAIRO_OPERATOR_SOURCE,
src=0xbfb00630, mask=0x0, dst=0x83f6e18, src_x=578, src_y=175,
    mask_x=578, mask_y=175, dst_x=578, dst_y=175, width=150, height=249) at
cairo-surface.c:1155
#11 0xb79f6864 in _clip_and_composite_trapezoids (src=0xbfb00630,
op=CAIRO_OPERATOR_SOURCE, dst=0x83f6e18, traps=0xbfb00590, clip=0x0,
    antialias=CAIRO_ANTIALIAS_DEFAULT) at cairo-surface-fallback.c:448
#12 0xb79f71f5 in _cairo_surface_fallback_fill (surface=0x83f6e18,
op=CAIRO_OPERATOR_SOURCE, source=0xbfb00630, path=0x0,
    fill_rule=CAIRO_FILL_RULE_WINDING, tolerance=0,
antialias=CAIRO_ANTIALIAS_DEFAULT) at cairo-surface-fallback.c:907
#13 0xb79f5895 in _cairo_surface_fill (surface=0x83f6e18,
op=CAIRO_OPERATOR_SOURCE, source=0x0, path=0x84e1cf0,
    fill_rule=CAIRO_FILL_RULE_WINDING, tolerance=0.10000000000000001,
antialias=CAIRO_ANTIALIAS_DEFAULT) at cairo-surface.c:1454
#14 0xb79e80df in _cairo_gstate_fill (gstate=0x8238250, path=0x0) at
cairo-gstate.c:1044
#15 0xb79e111c in *INT_cairo_fill_preserve (cr=0x84e1b80) at cairo.c:2096
#16 0xb79e1142 in cairo_fill (cr=0x84e1b80) at cairo.c:2072
#17 0xb71eab00 in WebCore::BitmapImage::draw () at /usr/local/include/glib-
2.0/glib/gthread.h:334
#18 0xb70d9917 in WebCore::GraphicsContext::drawImage () at
/usr/local/include/glib-2.0/glib/gthread.h:334
#1
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.webkit.org/pipermail/webkit-dev/attachments/20071217/a2aa88bd/attachment-0001.html