[Bug 44099] Big Image in Firefox crashes X server in

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=44099

--- Comment #1 from Stefan <kdevel at vogtner.de> 2012-02-15 06:17:56 PST ---
The "direct" URL to the 10-MB-JPEG is

http://upload.wikimedia.org/wikipedia/commons/d/db/Aerial_photo_of_WTC_groundzero.jpg

It crashes the X server not only when viewed in Firefox but also when using kuickshow. Full Backtrace:

Program received signal SIGBUS, Bus error.
0x00007ffff5849e5b in memcpy () from /lib64/libc.so.6
#0  0x00007ffff5849e5b in memcpy () from /lib64/libc.so.6
No symbol table info available.
#1  0x00007ffff3e95f8e in R600UploadToScreenCS (pDst=0x15d7080, x=0, y=0, 
    w=8098, h=8, src=0x1b74f88 "LD\025", src_pitch=32392) at r600_exa.c:1851
        pScrn = 0x80ba50
        info = 0x810110
        accel_state = 0x8116e0
        driver_priv = 0x16891c0
        scratch = 0x0
        copy_dst = 0x1641c30
        dst = 0x7fffe0df7000 <Address 0x7fffe0df7000 out of bounds>
        dst_domain = 4
        bpp = <optimized out>
        scratch_pitch = <optimized out>
        copy_pitch = 32768
        ret = <optimized out>
        flush = 0
        r = <optimized out>
        i = 1
        src_obj = {pitch = 22900864, width = 0, height = 4092015433, 
          offset = 32767, bpp = 0, domain = 0, bo = 0x7ffff37abeba, 
          tiling_flags = 22900864}
        dst_obj = {pitch = 0, width = 0, height = 8567792, offset = 0, 
          bpp = 32392, domain = 0, bo = 0x0, tiling_flags = 0}
#2  0x00007ffff37ad549 in exaDoPutImage (src_stride=<optimized out>, 
    bits=<optimized out>, format=<optimized out>, h=<optimized out>, 
    w=<optimized out>, y=<optimized out>, x=<optimized out>, 
    depth=<optimized out>, pGC=<optimized out>, pDrawable=<optimized out>)
    at exa_accel.c:219
No locals.
#3  exaPutImage (pDrawable=0x15d7080, pGC=0x1685c90, depth=24, x=0, y=0, 
    w=8098, h=8, leftPad=0, format=2, bits=0x1b74f88 "LD\025")
    at exa_accel.c:240
No locals.
#4  0x00000000004fcc02 in damagePutImage (pDrawable=0x15d7080, pGC=0x1685c90, 
    depth=24, x=0, y=0, w=8098, h=8, leftPad=0, format=2, 
    pImage=0x1b74f88 "LD\025") at damage.c:830
        oldFuncs = 0x7d3460
#5  0x0000000000433a0a in ProcPutImage (client=0x1653b30) at dispatch.c:1986
        pGC = 0x1685c90
        pDraw = 0x15d7080
        length = <optimized out>
#6  0x0000000000437099 in Dispatch () at dispatch.c:432
        result = 0
        client = 0x1653b30
        nready = 0
        start_tick = 160
#7  0x0000000000425d35 in main (argc=8, argv=0x7fffffffe238, 
    envp=<optimized out>) at main.c:287
        i = 1
        alwaysCheckForInput = {0, 1}

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.