Ticket #2206 (closed bug: fixed)

Opened 1 week ago

Last modified 13 hours ago

ShowImage (JPEGTranslator) crashes while reading jpeg file.

Reported by: mt Assigned to: axeld
Priority: normal Milestone: R1/alpha1
Component: Add-Ons/Translators Version: R1 development
Cc: Platform: x86

Description

ShowImage (JPEGTranslator) crashes while reading Bride14MP.jpg.
Bride14MP.jpg is Kodak Digital Camera sample file from
http://wwwjp.kodak.com/JP/ja/professional/products/cameras/dcsproslr/sampleImageBride.shtml
(This is Japanese site.)

Attachments

backtrace.txt (6.6 kB) - added by mt on 05/04/08 07:50:10.

Change History

05/04/08 07:50:10 changed by mt

  • attachment backtrace.txt added.

05/11/08 04:54:02 changed by stippi

Axel, it's entering an infinite loop in convert_exif_to_message() and parse_tiff_directory(). 

fcffa7a0   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffa7e0   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffa820   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffa860   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffa8a0   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffa8e0   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffa920   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffa960   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffa9a0   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffa9e0   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffaa20   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffaa60   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffaaa0   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffaae0   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffab20   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffab60   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffaba0   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffabe0   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffac20   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffac60   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffaca0   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcfface0   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffad20   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffad60   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffada0   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffade0   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffae20   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffae60   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffaea0   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffaee0   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffaf20   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffaf60   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffafa0   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffafe0   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffb020   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffb060   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffb0a0   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffb0e0   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffb120   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffb160   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffb1a0   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffb1e0   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffb220   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffb260   e4dd931a  parse_tiff_directory(TReadHelper &, long long, BMessage &, convert_tag const *, unsigned long) + 000000fa
fcffb2a0   e4dd943c  parse_tiff_directory(TReadHelper &, BMessage &, convert_tag const *, unsigned long) + 000000ac
fcffb2e0   e4dd95d2  convert_exif_to_message(BPositionIO &, BMessage &, convert_tag const *, unsigned long) + 0000017e
fcffb370   e4dd9659  convert_exif_to_message(BPositionIO &, BMessage &) + 00000029
fcffb3a0   e4ddd32c  Decompress(BPositionIO *, BPositionIO *, BMessage *, __jmp_buf_tag const (*)[1]) + 00000154
fcffb730   e4ddc979  Translate + 000000b9
fcffb780   ec5e1f12  BTranslatorRoster::Translate(BPositionIO *, translator_info const *, BMessage *, BPositionIO *, unsigned long, unsigned long, char const *) + 00000142
fcffb9b4   80011e11  ShowImageView::SetImage(entry_ref const *) + 000001d5
fcffbd80   8001a08d  ShowImageWindow::ShowImageWindow(entry_ref const *, BMessenger const &) + 00000559
fcffbe64   80010278  ShowImageApp::Open(entry_ref const *) + 00000038
fcffbe8c   800101e1  ShowImageApp::RefsReceived(BMessage *) + 000000ad
fcffbec4   ec16916c  BApplication::DispatchMessage(BMessage *, BHandler *) + 00000494
fcffc0e4   ec171a19  BLooper::task_looper(void) + 00000275
fcffc140   ec16740c  BApplication::Run(void) + 00000068
fcffc154   8000fa90  main + 0000003c
fcffc34c   8000f924  _start + 00000060
ShowImage:

Have not looked at the code yet, but it is 100% reproducable, also in ZETA.

05/11/08 06:53:08 changed by axeld

  • status changed from new to assigned.
  • milestone changed from R1 to R1/alpha1.

05/11/08 07:32:04 changed by axeld

  • status changed from assigned to closed.
  • resolution set to fixed.

The EXIF data is corrupted in those files - fixed in r25447.