[haiku-bugs] [Haiku] #15728: Crash on free in PainterAggInterface

  • From: "Haiku" <trac@xxxxxxxxxxxx>
  • To: undisclosed-recipients: ;
  • Date: Wed, 19 Feb 2020 17:01:00 -0000

#15728: Crash on free in PainterAggInterface
--------------------------------+------------------------------
 Reporter:  humdinger           |        Owner:  axeld
     Type:  bug                 |       Status:  new
 Priority:  normal              |    Milestone:  Unscheduled
Component:  Servers/app_server  |      Version:  R1/Development
 Keywords:                      |   Blocked By:
 Blocking:                      |  Has a Patch:  0
 Platform:  All                 |
--------------------------------+------------------------------
 This is hrev53888, 32bit (VESA)

 Got this crash (Web+ may have something to do with it, it was loading a
 page):
 {{{
 thread 50918: w:50824:offscreen
         state: Exception (Segment violation)

         Frame           IP                      Function Name
         -----------------------------------------------
         0x70799498      0x18b5024       BPrivate::processHeap::free(void*)
 + 0x64
 [...]
                 Frame memory:
                         [0x70799470]  .I...... ....k..   9c 49 8e 01 04 00
 00 00 20 16 ea 19 09 6b 8b 01
                         [0x70799480]  .I....yp..yp....   9c 49 8e 01 94 94
 79 70 90 94 79 70 03 00 00 00
                         [0x70799490]  ....;...           08 08 08 02 3b 00
 00 00
         0x707994c8      0x18b6ba5       free + 0xa9
         0x70799500      0x1826187       operator delete [](void) + 0x1f
         0x70799530      0x1bcc2aa       _._19PainterAggInterface + 0x14e
         0x70799570      0x1ba400b       _._7Painter + 0x63
         0x707995a0      0x1b96a75       _._13DrawingEngine + 0x49
         0x70799720      0x1b941ef       _RenderSource() + 0x3ff
         0x707997b0      0x1b9286c       AlphaMask::_Generate() + 0x80
         0x70799820      0x1b925c6
 AlphaMask::SetCanvasGeometry(IntPoint, IntRect) + 0x1c2
         0x707998b0      0x1b588e2
 ServerWindow::_UpdateDrawState(View*) + 0x102
         0x70799bf0      0x1b4f745
 ServerWindow::_DispatchViewMessage(int32, BPrivate::LinkReceiver&) +
 0x2ebd
         0x70799d20      0x1b4c7c9
 ServerWindow::_DispatchMessage(int32, BPrivate::LinkReceiver&) + 0x1251
         0x70799da0      0x1b5830e       ServerWindow::_MessageLooper() +
 0x256
         0x70799dd0      0x1b2b0a6
 MessageLooper::_message_thread(void*) + 0x26
         0x70799df8      0x182fccb       thread_entry + 0x27
         00000000        0x600aa258      commpage_thread_exit + 0
 }}}

 Not sure the ticket's summary makes sense, please correct.
-- 
Ticket URL: <https://dev.haiku-os.org/ticket/15728>
Haiku <https://dev.haiku-os.org>
The Haiku operating system.

Other related posts: