<html>
<head>
<base href="https://bugs.webkit.org/" />
</head>
<body><span class="vcard"><a class="email" href="mailto:WebKit@JeremyZerfas.com" title="Jeremy Zerfas <WebKit@JeremyZerfas.com>"> <span class="fn">Jeremy Zerfas</span></a>
</span> changed
<a class="bz_bug_link
bz_status_NEW "
title="NEW - [Cairo] Surface pointer passed to asNewNativeImage() might be freed."
href="https://bugs.webkit.org/show_bug.cgi?id=111179">bug 111179</a>
<br>
<table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>What</th>
<th>Removed</th>
<th>Added</th>
</tr>
<tr>
<td style="text-align:right;">CC</td>
<td>
</td>
<td>WebKit@JeremyZerfas.com
</td>
</tr></table>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - [Cairo] Surface pointer passed to asNewNativeImage() might be freed."
href="https://bugs.webkit.org/show_bug.cgi?id=111179#c33">Comment # 33</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - [Cairo] Surface pointer passed to asNewNativeImage() might be freed."
href="https://bugs.webkit.org/show_bug.cgi?id=111179">bug 111179</a>
from <span class="vcard"><a class="email" href="mailto:WebKit@JeremyZerfas.com" title="Jeremy Zerfas <WebKit@JeremyZerfas.com>"> <span class="fn">Jeremy Zerfas</span></a>
</span></b>
<pre>(In reply to <a href="show_bug.cgi?id=111179#c22">comment #22</a>)
<span class="quote">> I cannot reproduce just by viewing the page in MiniBrowser. Do I need a
> particular port or version of Cairo to see the crash?</span >
The occurrence of these crashes also seem to be influenced by the bit rate of the GIF, the transfer rate from the server, and whether the GIF is offscreen while it's loading which might explain why you're having trouble reproducing these crashes. At least that seems to be the case based on my testing of WinLauncher.exe from a release build of the Windows Cairo port on Windows 10 x86_64.
The GIF linked to from the original bug is pretty small and doesn't seem to reliably produce any crashes. However if the transfer rate is limited to less than 200 KBps or so it does seem to reliably produce a corrupt animation (images are offset or have random noise in them).
The animated GIFs on the Stack Exchange page won't cause any problems either unless the window size is large enough to make the animated GIF in the first answer visible while the page is loading.
I've made a spinning cube animation that should reliably demonstrate this problem, you can view it at <a href="http://www.jeremyzerfas.com/WebKit/Cairo_Animated_GIF_Crashing/Spinning_Cube_500x500.gif">http://www.jeremyzerfas.com/WebKit/Cairo_Animated_GIF_Crashing/Spinning_Cube_500x500.gif</a> . To demonstrate that the crashes only occur when the animated GIFs are onscreen, I've also created a page at <a href="http://www.jeremyzerfas.com/WebKit/Cairo_Animated_GIF_Crashing/Spinning_Cube_Page_with_Animation_at_the_Bottom.html">http://www.jeremyzerfas.com/WebKit/Cairo_Animated_GIF_Crashing/Spinning_Cube_Page_with_Animation_at_the_Bottom.html</a> that includes the same animation but shows it on a long page that you need to scroll down in order to make the animation visible. I'll attach the two files in case I remove these files later but keep in mind that the crashes also don't seem to occur if the animation is loaded from the file system instead of from a web server.
Zoltan's patch in <span class=""><a href="attachment.cgi?id=192693&action=diff" name="attach_192693" title="patch">attachment 192693</a> <a href="attachment.cgi?id=192693&action=edit" title="patch">[details]</a></span> seems to work well for fixing this bug and looks like a good fix for now.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>