[Webkit-unassigned] [Bug 75624] New: Web Inspector: Low Memory? Freeze/Crash when inspecting ImageData's CanvasPixelArray

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Jan 5 08:08:34 PST 2012


https://bugs.webkit.org/show_bug.cgi?id=75624

           Summary: Web Inspector: Low Memory? Freeze/Crash when
                    inspecting ImageData's CanvasPixelArray
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
               URL: http://fooo.fr/~vjeux/epita/raytracer/raytracer.html#t
                    exturing
        OS/Version: All
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: Web Inspector
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: chutten at rim.com
                CC: timothy at apple.com, rik at webkit.org, keishi at webkit.org,
                    pmuellr at yahoo.com, joepeck at webkit.org,
                    pfeldman at chromium.org, yurys at chromium.org,
                    bweinstein at apple.com, apavlov at chromium.org,
                    loislo at chromium.org, chutten at rim.com


When trying to expand a CanvasPixelArray data member of an ImageData object in the Scripts tab, the browser hogs memory and eventually freezes/crashes.

Issue present on at least BlackBerry Browser (BlackBerry PlayBook), Chromium 15 (Ubuntu), Chrome 17 (Windows XP).

The range of platforms suggests that it is javascript-engine independent (possible located in WebCore's bindings?) as Chrome uses v8 and the BlackBerry Browser uses JSC.

Reproduction steps:
1. Visit http://fooo.fr/~vjeux/epita/raytracer/raytracer.html#texturing
2. Inspect the Page
3. Navigate to Scripts
4. Apply breakpoint to trace.js:83 (Chrome seems to prefer :86)
5. Press "Ray Trace!"
6. When breakpoint is hit, add a watch expression for ctx.getImageData(0,0,this.width,this.height)
7. Expand the resultant ImageData
8. Attempt to expand 'data' the CanvasPixelArray member

Bug#67564 may or may not be interesting additional reading on this subject.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list