[Mono-bugs] [Bug 328539] New: Closing the browser during animation can SIGSEGV

[bugzilla_noreply at novell.com]

https://bugzilla.novell.com/show_bug.cgi?id=328539

           Summary: Closing the browser during animation can SIGSEGV
           Product: Moonlight
           Version: unspecified
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: media
        AssignedTo: mono-bugs at ximian.com
        ReportedBy: spouliot at novell.com
         QAContact: mono-bugs at ximian.com
          Found By: ---


Start a SL app, like Monotone, in FF. During an animation (e.g. ellipse swirl)
close the browser.

This leads to a crash in Type::Find with an invalid value.

Program received signal SIGSEGV, Segmentation fault.
Type::Find (type=165100528) at type.cpp:184
184     Type::Find (Type::Kind type)
Current language:  auto; currently c++
(gdb) bt
#0  Type::Find (type=165100528) at type.cpp:184
#1  0xb3d45643 in MediaElement::SetValue (this=0x9d73bf0, prop=0x969c520,
value=0xbf8b7660) at media.cpp:599
#2  0xb3d3408f in DependencyObject::SetValue (this=0x9d73bf0,
property=0x969c520, value=@0xbf8b7660) at dependencyobject.cpp:224
#3  0xb3d43882 in MediaElement::SetValue (this=0x9d73bf0, prop=0x969c520,
value=@0xbf8b76a0) at media.cpp:572
#4  0xb3d4365b in media_element_set_position (media=0x9d73bf0,
value=12577850000) at media.cpp:929
#5  0xb3d43b16 in MediaElement::AdvanceFrame (this=0x9d73bf0) at media.cpp:246
#6  0xb3d43bad in media_element_advance_frame (user_data=0x9d73bf0) at
media.cpp:263
#7  0xb78eb1e6 in g_source_get_current_time () from
/opt/gnome/lib/libglib-2.0.so.0
#8  0xb78eaabd in g_main_context_dispatch () from
/opt/gnome/lib/libglib-2.0.so.0
#9  0xb78edcbf in g_main_context_check () from /opt/gnome/lib/libglib-2.0.so.0
#10 0xb78ee069 in g_main_loop_run () from /opt/gnome/lib/libglib-2.0.so.0
#11 0xb7c1cd04 in gtk_main () from /opt/gnome/lib/libgtk-x11-2.0.so.0
#12 0x081e8018 in CallQueryInterface<nsIFile, nsILocalFile> ()
#13 0x085b44e2 in nsCOMPtr<nsIUTF8StringEnumerator>::nsCOMPtr ()
#14 0x08085580 in nsXPTCStubBase::Stub229 ()
#15 0x089f1d48 in ?? ()
#16 0x088eafc8 in ?? ()
#17 0x00000000 in ?? ()

The prop variable is bad (previously freed?) when setting a timespan.

(gdb) print prop->name
$1 = 0x969c8f8 "\030"

(gdb) print value->GetKind ()
$2 = TIMESPAN


-- 
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.