Bug 16593 – [GTK] Crash in WebCore::BitmapImage::draw/cairo

• Status: RESOLVED
• Resolution: FIXED
• Component: WebKitGTK

[Xan Lopez]

Copying report from GNOME's bugzilla (http://bugzilla.gnome.org/show_bug.cgi?id=505290). Not much data, but the trace is very good. Cutting due to excesive size, see original report for full data.

---

Version: 2.21.4

What were you doing when the application crashed?
WebKit rev28669
Opening a HTML Timetable


Distribution: Gentoo Base System release 1.12.10
Gnome Release: 2.21.4 2007-12-19 (Gentoo)
BugBuddy Version: 2.20.1

System: Linux 2.6.22-gentoo-r9 #1 Sat Nov 24 20:00:11 CET 2007 i686
X Vendor: The X.Org Foundation
X Vendor Release: 10300000
Selinux: No
Accessibility: Disabled
GTK+ Theme: Clearlooks
Icon Theme: gnome

Memory status: size: 115376128 vsize: 115376128 resident: 64405504 share:
20025344 rss: 64405504 rss_rlim: 4294967295
CPU usage: start_time: 1198430664 rtime: 10582 utime: 9294 stime: 1288 cutime:0
cstime: 0 timeout: 0 it_real_value: 0 frequency: 100

Backtrace was generated from '/usr/bin/epiphany'

Using host libthread_db library "/lib/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread 0xb4bd66f0 (LWP 27586)]
0xb7f57410 in __kernel_vsyscall ()
#0  0xb7f57410 in __kernel_vsyscall ()
#1  0xb6d58f83 in __waitpid_nocancel () from /lib/libpthread.so.0
#2  0xb6c9d5da in IA__g_spawn_sync (working_directory=0x0, argv=0xa280058, 
    envp=0x0, flags=G_SPAWN_SEARCH_PATH, child_setup=0, user_data=0x0, 
    standard_output=0x0, standard_error=0x0, exit_status=0x0, error=0x8137c98)
    at gspawn.c:374
#3  0xb6c9d8ec in IA__g_spawn_command_line_sync (
    command_line=0xa1afb50 "bug-buddy --appname=\"epiphany\" --pid=27586", 
    standard_output=0x0, standard_error=0x0, exit_status=0x0, error=0x8137c98)
    at gspawn.c:682
#4  0xb49b7ee0 in run_bug_buddy (appname=0x8119a40 "epiphany", 
    pid=<value optimized out>, minidump_path=<value optimized out>)
    at gnome-breakpad.cc:213
#5  0xb49b8424 in check_if_gdb (callback_context=0x0) at gnome-breakpad.cc:283
#6  0xb49b86ce in google_breakpad::ExceptionHandler::InternalWriteMinidump (
    this=0xb49c4360, signo=6, sighandler_ebp=135500056, sig_ctx=0x8139104)
    at ../google-breakpad/src/client/linux/handler/exception_handler.cc:225
#7  0xb49b8c0c in google_breakpad::ExceptionHandler::HandleException (signo=6)
    at ../google-breakpad/src/client/linux/handler/exception_handler.cc:196
#8  <signal handler called>
#9  0xb7f57410 in __kernel_vsyscall ()
#10 0xb6b1d101 in *__GI_raise (sig=6)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#11 0xb6b1e8e8 in *__GI_abort () at abort.c:88
#12 0xb6b167a5 in *__GI___assert_fail (
    assertion=0xb678ae24 "status == CAIRO_STATUS_SUCCESS", 
    file=0xb678c963 "cairo-pattern.c", line=1950, 
    function=0xb678cb24 "_cairo_pattern_get_extents") at assert.c:78
#13 0xb674d382 in _cairo_pattern_get_extents (pattern=0xbf825b04, 
    extents=0xbf825aa0) at cairo-pattern.c:1950
#14 0xb674b13f in _cairo_surface_fallback_fill (surface=0x966a198, 
    op=CAIRO_OPERATOR_OVER, source=0xbf825b04, path=0x96b5de4, 
    fill_rule=CAIRO_FILL_RULE_WINDING, tolerance=0.10000000000000001, 
    antialias=CAIRO_ANTIALIAS_DEFAULT) at cairo-surface-fallback.c:875
#15 0xb674755b in _cairo_surface_fill (surface=0x966a198, 
    op=CAIRO_OPERATOR_OVER, source=0xbf825c2c, path=0x96b5de4, 
    fill_rule=CAIRO_FILL_RULE_WINDING, tolerance=0.10000000000000001, 
    antialias=CAIRO_ANTIALIAS_DEFAULT) at cairo-surface.c:1586
#16 0xb6737b33 in _cairo_gstate_fill (gstate=0xa3d6ff8, path=0x96b5de4)
    at cairo-gstate.c:1073
#17 0xb672f19c in *INT_cairo_fill_preserve (cr=0x96b5c70) at cairo.c:2106
#18 0xb672f1c2 in cairo_fill (cr=0x96b5c70) at cairo.c:2082
#19 0xb7c00cfc in WebCore::BitmapImage::draw (this=0xa38f108, 
    context=0xbf827f34, dst=@0xbf825e3c, src=@0xbf825e2c, 
    op=WebCore::CompositeSourceOver)
    at platform/graphics/cairo/ImageCairo.cpp:100
#20 0xb7aebece in WebCore::GraphicsContext::drawImage (this=0xbf827f34, 
    image=0xa38f108, dest=@0xbf825e8c, src=@0xbf825e7c, 
    op=WebCore::CompositeSourceOver, useLowQualityScale=false)
    at platform/graphics/GraphicsContext.cpp:370
#21 0xb7aec022 in WebCore::GraphicsContext::drawImage (this=0xbf827f34, 
    image=0xa38f108, dest=@0xbf825f94, srcRect=@0xbf825ec8, 
    op=WebCore::CompositeSourceOver, useLowQualityScale=false)
    at platform/graphics/GraphicsContext.cpp:240
#22 0xb7aec201 in WebCore::GraphicsContext::drawImage (this=0xbf827f34, 
    image=0xa38f108, r=@0xbf825f94, op=WebCore::CompositeSourceOver, 
    useLowQualityScale=false) at platform/graphics/GraphicsContext.cpp:230
#23 0xb7b5c823 in WebCore::RenderImage::paintReplaced (this=0x9ab9bdc, 
    paintInfo=@0xbf82608c, tx=843, ty=8108) at rendering/RenderImage.cpp:258
#24 0xb7b803dc in WebCore::RenderReplaced::paint (this=0x9ab9bdc, 
    paintInfo=@0xbf82608c, tx=843, ty=8108)
    at rendering/RenderReplaced.cpp:112
#25 0xb7b25660 in WebCore::InlineBox::paint (this=0x913b9a8, 
    paintInfo=@0xbf8260f8, tx=843, ty=8108) at rendering/InlineBox.cpp:154
#26 0xb7b27135 in WebCore::InlineFlowBox::paint (this=0x913b9d4, 
    paintInfo=@0xbf8261ac, tx=843, ty=8108) at rendering/InlineFlowBox.cpp:640
#27 0xb7bb24da in WebCore::RootInlineBox::paint (this=0x913b9d4, 
    paintInfo=@0xbf8261ac, tx=843, ty=8108) at rendering/RootInlineBox.cpp:163
#28 0xb7b563f9 in WebCore::RenderFlow::paintLines (this=0x9ab9b00, 
    paintInfo=@0xbf826708, tx=843, ty=8108) at rendering/RenderFlow.cpp:433
#29 0xb7b2fc77 in WebCore::RenderBlock::paintContents (this=0x9ab9b00, 
    paintInfo=@0xbf826708, tx=843, ty=8108) at rendering/RenderBlock.cpp:1502
#30 0xb7b3917d in WebCore::RenderBlock::paintObject (this=0x9ab9b00, 
    paintInfo=@0xbf826708, tx=843, ty=8108) at rendering/RenderBlock.cpp:1586
#31 0xb7b902cc in WebCore::RenderTableCell::paint (this=0x9ab9b00, 
    paintInfo=@0xbf826708, tx=843, ty=8108)
    at rendering/RenderTableCell.cpp:643
#32 0xb7b98288 in WebCore::RenderTableSection::paint (this=0x9ab998c, 
    paintInfo=@0xbf826708, tx=840, ty=8106)
    at rendering/RenderTableSection.cpp:967
#33 0xb7b918a5 in WebCore::RenderTable::paint (this=0x9ab988c, 
    paintInfo=@0xbf826778, tx=150, ty=8106) at rendering/RenderTable.cpp:475
#34 0xb7b2eecf in WebCore::RenderBlock::paintFloats (this=0x9ab53e4, 
    paintInfo=@0xbf826c88, tx=150, ty=8106, paintSelection=false)
    at rendering/RenderBlock.cpp:1650
#35 0xb7b391e2 in WebCore::RenderBlock::paintObject (this=0x9ab53e4, 
    paintInfo=@0xbf826c88, tx=150, ty=8106) at rendering/RenderBlock.cpp:1600
#36 0xb7b902cc in WebCore::RenderTableCell::paint (this=0x9ab53e4, 
    paintInfo=@0xbf826c88, tx=150, ty=8106)
    at rendering/RenderTableCell.cpp:643
#37 0xb7b98321 in WebCore::RenderTableSection::paint (this=0xa12c69c, 
    paintInfo=@0xbf826c88, tx=50, ty=164)
    at rendering/RenderTableSection.cpp:967
#38 0xb7b918a5 in WebCore::RenderTable::paint (this=0xa12c59c, 
    paintInfo=@0xbf826cf0, tx=50, ty=140) at rendering/RenderTable.cpp:475
#39 0xb7b2fc01 in WebCore::RenderBlock::paintChildren (this=0x9177784, 
    paintInfo=@0xbf827228, tx=50, ty=140) at rendering/RenderBlock.cpp:1528
#40 0xb7b2fc9c in WebCore::RenderBlock::paintContents (this=0x9177784, 
    paintInfo=@0xbf827228, tx=50, ty=140) at rendering/RenderBlock.cpp:1504
#41 0xb7b3917d in WebCore::RenderBlock::paintObject (this=0x9177784, 
    paintInfo=@0xbf827228, tx=50, ty=140) at rendering/RenderBlock.cpp:1586
#42 0xb7b902cc in WebCore::RenderTableCell::paint (this=0x9177784, 
    paintInfo=@0xbf827228, tx=50, ty=140) at rendering/RenderTableCell.cpp:643
#43 0xb7b98321 in WebCore::RenderTableSection::paint (this=0x90d27b8, 
    paintInfo=@0xbf827228, tx=20, ty=100)
    at rendering/RenderTableSection.cpp:967
#44 0xb7b918a5 in WebCore::RenderTable::paint (this=0x90d261c, 
    paintInfo=@0xbf827364, tx=0, ty=0) at rendering/RenderTable.cpp:475
#45 0xb7b66136 in WebCore::RenderLayer::paintLayer (this=0x90d26e0, 
    rootLayer=0xa21fb74, p=0xbf827f34, paintDirtyRect=@0xbf8277fc, 
    haveTransparency=false, paintRestriction=WebCore::PaintRestrictionNone, 
    paintingRoot=0x0) at rendering/RenderLayer.cpp:1582
#46 0xb7b66014 in WebCore::RenderLayer::paintLayer (this=0xa21fd0c, 
    rootLayer=0xa21fb74, p=0xbf827f34, paintDirtyRect=@0xbf8277fc, 
    haveTransparency=false, paintRestriction=WebCore::PaintRestrictionNone, 
    paintingRoot=0x0) at rendering/RenderLayer.cpp:1609
#47 0xb7b66014 in WebCore::RenderLayer::paintLayer (this=0xa21fb74, 
    rootLayer=0xa21fb74, p=0xbf827f34, paintDirtyRect=@0xbf8277fc, 
    haveTransparency=false, paintRestriction=WebCore::PaintRestrictionNone, 
    paintingRoot=0x0) at rendering/RenderLayer.cpp:1609
#48 0xb7b66239 in WebCore::RenderLayer::paint (this=0xa21fb74, p=0xbf827f34, 
    damageRect=@0xbf8277fc, paintRestriction=WebCore::PaintRestrictionNone, 
    paintingRoot=0x0) at rendering/RenderLayer.cpp:1437
#49 0xb7ab2721 in WebCore::Frame::paint (this=0x9101cf0, p=0xbf827f34, 
    rect=@0xbf8277fc) at page/Frame.cpp:1353
#50 0xb7bf21e4 in WebCore::ScrollView::paint (this=0x9075a08, 
    context=0xbf827f34, rect=@0xbf827974)
    at platform/gtk/ScrollViewGtk.cpp:724
#51 0xb7bb15d9 in WebCore::RenderWidget::paint (this=0x8e1fdc8, 
    paintInfo=@0xbf827970, tx=155, ty=0) at rendering/RenderWidget.cpp:197
#52 0xb7b57f62 in WebCore::RenderFrameSet::paint (this=0x8e1fc14, 
    paintInfo=@0xbf827970, tx=0, ty=0) at rendering/RenderFrameSet.cpp:143
#53 0xb7b2fc01 in WebCore::RenderBlock::paintChildren (this=0x8e1fab8, 
    paintInfo=@0xbf827b84, tx=0, ty=0) at rendering/RenderBlock.cpp:1528
#54 0xb7b2fc9c in WebCore::RenderBlock::paintContents (this=0x8e1fab8, 
    paintInfo=@0xbf827b84, tx=0, ty=0) at rendering/RenderBlock.cpp:1504
#55 0xb7b3917d in WebCore::RenderBlock::paintObject (this=0x8e1fab8, 
    paintInfo=@0xbf827b84, tx=0, ty=0) at rendering/RenderBlock.cpp:1586
#56 0xb7b332b5 in WebCore::RenderBlock::paint (this=0x8e1fab8, 
    paintInfo=@0xbf827b84, tx=0, ty=<value optimized out>)
    at rendering/RenderBlock.cpp:1416
#57 0xb7b66160 in WebCore::RenderLayer::paintLayer (this=0x8e1fb3c, 
    rootLayer=0x8e1f9a4, p=0xbf827f34, paintDirtyRect=@0xbf827e7c, 
    haveTransparency=false, paintRestriction=WebCore::PaintRestrictionNone, 
    paintingRoot=0x0) at rendering/RenderLayer.cpp:1584
#58 0xb7b66014 in WebCore::RenderLayer::paintLayer (this=0x8e1f9a4, 
    rootLayer=0x8e1f9a4, p=0xbf827f34, paintDirtyRect=@0xbf827e7c, 
    haveTransparency=false, paintRestriction=WebCore::PaintRestrictionNone, 
    paintingRoot=0x0) at rendering/RenderLayer.cpp:1609
#59 0xb7b66239 in WebCore::RenderLayer::paint (this=0x8e1f9a4, p=0xbf827f34, 
    damageRect=@0xbf827e7c, paintRestriction=WebCore::PaintRestrictionNone, 
    paintingRoot=0x0) at rendering/RenderLayer.cpp:1437
#60 0xb7ab2721 in WebCore::Frame::paint (this=0x8358ba0, p=0xbf827f34, 
    rect=@0xbf827e7c) at page/Frame.cpp:1353
#61 0xb7bf21e4 in WebCore::ScrollView::paint (this=0x845c418, 
    context=0xbf827f34, rect=@0xbf827f24)
    at platform/gtk/ScrollViewGtk.cpp:724
#62 0xb7c0b8aa in webkit_web_view_expose_event (widget=0x81d16e8, 
    event=0xbf8284d0) at ../WebKit/gtk/WebView/webkitwebview.cpp:101
#63 0xb734970e in _gtk_marshal_BOOLEAN__BOXED (closure=0x814ee18, 
    return_value=0xbf828100, n_param_values=2, param_values=0xbf8281ec, 
    invocation_hint=0xbf8280ec, marshal_data=0xb7c0b7d0) at gtkmarshalers.c:84
#64 0xb6d13279 in g_type_class_meta_marshal (closure=0x814ee18, 
    return_value=0xbf828100, n_param_values=2, param_values=0xbf8281ec, 
    invocation_hint=0xbf8280ec, marshal_data=0xc8) at gclosure.c:567
#65 0xb6d15035 in IA__g_closure_invoke (closure=0x814ee18, 
    return_value=0xbf828100, n_param_values=2, param_values=0xbf8281ec, 
    invocation_hint=0xbf8280ec) at gclosure.c:490
#66 0xb6d29196 in signal_emit_unlocked_R (node=0x814ef30, detail=0, 
    instance=0x81d16e8, emission_return=0xbf8283ac, 
    instance_and_params=0xbf8281ec) at gsignal.c:2478
#67 0xb6d29f1f in IA__g_signal_emit_valist (instance=0x81d16e8, signal_id=52, 
    detail=0, 
    var_args=0xbf828430
"H\204\202¿Ð\204\202¿è\026\035\bï\201F·è\026\035\bPL\024\b") at
gsignal.c:2209
#68 0xb6d2a799 in IA__g_signal_emit (instance=0x81d16e8, signal_id=52, 
    detail=0) at gsignal.c:2243
#69 0xb74635a8 in gtk_widget_event_internal (widget=0x81d16e8, 
    event=0xbf8284d0) at gtkwidget.c:4675
#70 0xb7343e56 in IA__gtk_main_do_event (event=0xbf8284d0) at gtkmain.c:1514
#71 0xb71a9e5b in gdk_window_process_updates_internal (window=0x8cc7808)
    at gdkwindow.c:2385
#72 0xb71aa518 in IA__gdk_window_process_all_updates () at gdkwindow.c:2451
#73 0xb71aa53b in gdk_window_update_idle (data=0x0) at gdkwindow.c:2292
#74 0xb7190768 in gdk_threads_dispatch (data=0x8a733b0) at gdk.c:470
#75 0xb6c5d0e1 in g_idle_dispatch (source=0x96d6d30, callback=0x6, 
    user_data=0x8a733b0) at gmain.c:4142
#76 0xb6c5ed9e in IA__g_main_context_dispatch (context=0x81382b8)
    at gmain.c:2064
#77 0xb6c62267 in g_main_context_iterate (context=0x81382b8, block=1, 
    dispatch=1, self=0x8111380) at gmain.c:2697
#78 0xb6c62627 in IA__g_main_loop_run (loop=0x8175bc8) at gmain.c:2905
#79 0xb73440b3 in IA__gtk_main () at gtkmain.c:1163
#80 0x0806d2ae in main (argc=1, argv=0xbf8298b4) at ephy-main.c:723

Thread 1 (Thread 0xb4bd66f0 (LWP 27586)):
#0  0xb7f57410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb6d58f83 in __waitpid_nocancel () from /lib/libpthread.so.0
No symbol table info available.
#2  0xb6c9d5da in IA__g_spawn_sync (working_directory=0x0, argv=0xa280058, 
    envp=0x0, flags=G_SPAWN_SEARCH_PATH, child_setup=0, user_data=0x0, 
    standard_output=0x0, standard_error=0x0, exit_status=0x0, error=0x8137c98)
    at gspawn.c:374
        outpipe = -1
        errpipe = -1
        pid = 1431
        fds = {__fds_bits = {135494652, -1208535124, 24, 0, 11, 0, 1, 0, 10, 
    0, -1, 135494664, 135494652, 135494648, 170393688, 54, 34, 34, 0, 3, 0, 
    -1228801280, -1229598064, -1229605264, -1227845644, -1264840928, 
    135494724, 135494680, 138917144, 135494724, -1264840928, 138917144}}
        ret = -512
        outstr = (GString *) 0x0
        errstr = (GString *) 0x0
        failed = 0
        status = <value optimized out>
        __PRETTY_FUNCTION__ = "IA__g_spawn_sync"
#3  0xb6c9d8ec in IA__g_spawn_command_line_sync (
    command_line=0xa1afb50 "bug-buddy --appname=\"epiphany\" --pid=27586", 
    standard_output=0x0, standard_error=0x0, exit_status=0x0, error=0x8137c98)
    at gspawn.c:682
        retval = <value optimized out>
        argv = (gchar **) 0xa280058
        __PRETTY_FUNCTION__ = "IA__g_spawn_command_line_sync"
#4  0xb49b7ee0 in run_bug_buddy (appname=0x8119a40 "epiphany", 
    pid=<value optimized out>, minidump_path=<value optimized out>)
    at gnome-breakpad.cc:213
        exec_str = (
    gchar *) 0xa1afb50 "bug-buddy --appname=\"epiphany\" --pid=27586"
        res = <value optimized out>
        error = (GError *) 0x0
#5  0xb49b8424 in check_if_gdb (callback_context=0x0) at gnome-breakpad.cc:283
        mypath = "/usr/bin/epiphany", '\0' <repeats 237 times>
        gdb = (gchar *) 0x9a2f468 "/usr/bin/gdb"
        appname = (gchar *) 0x8119a40 "epiphany"
        pid = 27586
#6  0xb49b86ce in google_breakpad::ExceptionHandler::InternalWriteMinidump (
    this=0xb49c4360, signo=6, sighandler_ebp=135500056, sig_ctx=0x8139104)
    at ../google-breakpad/src/client/linux/handler/exception_handler.cc:225
        guid = {data1 = 6, data2 = 37144, data3 = 2067, 
  data4 = "\000°ö·\000\000\000"}
        success = <value optimized out>
        guid_str =
"\000\001\000\000\000\001\000\000\000\000\000\000\000e>\233&#180;\000
\233&#180;0\"\001\000Ô7\233&#180;ô?\234&#180;`C\234&#180;"
#7  0xb49b8c0c in google_breakpad::ExceptionHandler::HandleException (signo=6)
    at ../google-breakpad/src/client/linux/handler/exception_handler.cc:196
        current_ebp = 135500056
        current_handler = (google_breakpad::ExceptionHandler *) 0xb49c4360
        sig_ctx = (sigcontext *) 0x0
#8  <signal handler called>
No symbol table info available.
#9  0xb7f57410 in __kernel_vsyscall ()
No symbol table info available.
#10 0xb6b1d101 in *__GI_raise (sig=6)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
        resultvar = <value optimized out>
        pid = -1228800012
        selftid = 0
#11 0xb6b1e8e8 in *__GI_abort () at abort.c:88
        act = {__sigaction_handler = {
    sa_handler = 0xb6c20b60 <_nl_state_lock>, 
    sa_sigaction = 0xb6c20b60 <_nl_state_lock>}, sa_mask = {__val = {
      3066167284, 3066167284, 3066171680, 157713856, 3212990364, 3065362169, 
      3066171680, 157713856, 3066167284, 123, 124, 3212990568, 3065325979, 
      157713856, 157713856, 123, 157640712, 0, 123, 4222451712, 157713856, 
      157713957, 157713856, 157713856, 157713979, 157714156, 157713856, 
      157714156, 0, 0, 0, 0}}, sa_flags = 0, sa_restorer = 0x73256020}
        sigs = {__val = {32, 0 <repeats 31 times>}}
#12 0xb6b167a5 in *__GI___assert_fail (
    assertion=0xb678ae24 "status == CAIRO_STATUS_SUCCESS", 
    file=0xb678c963 "cairo-pattern.c", line=1950, 
    function=0xb678cb24 "_cairo_pattern_get_extents") at assert.c:78
        buf = 0x9658f28 ""
        errstr = "Unexpected error.\n"
#13 0xb674d382 in _cairo_pattern_get_extents (pattern=0xbf825b04, 
    extents=0xbf825aa0) at cairo-pattern.c:1950
        left = <value optimized out>
        top = <value optimized out>
        bottom = <value optimized out>
        status = CAIRO_STATUS_INVALID_MATRIX
        surface_extents = {x = 0, y = 0, width = 1, height = 1}
        imatrix = {xx = -nan(0x8000000000000), yx = 0, 
  xy = -nan(0x8000000000000), yy = 1, x0 = -nan(0x8000000000000), y0 = -167}
        x = <value optimized out>
        right = <value optimized out>
        sy = <value optimized out>
        y = <value optimized out>
        set = <value optimized out>
        __PRETTY_FUNCTION__ = "_cairo_pattern_get_extents"
#14 0xb674b13f in _cairo_surface_fallback_fill (surface=0x966a198, 
    op=CAIRO_OPERATOR_OVER, source=0xbf825b04, path=0x96b5de4, 
    fill_rule=CAIRO_FILL_RULE_WINDING, tolerance=0.10000000000000001, 
    antialias=CAIRO_ANTIALIAS_DEFAULT) at cairo-surface-fallback.c:875
        source_extents = {x = 0, y = 0, width = 0, height = 32768}
        status = <value optimized out>
        traps = {status = 4294443008, extents = {p1 = {x = -1081976232, 
      y = -1233856168}, p2 = {x = -1081976028, y = -1081976200}}, 
  num_traps = -1081976028, traps_size = 1072693248, traps = 0xb6793ff4, 
  traps_embedded = {{top = 157721076, bottom = -1081976136, left = {p1 = {
          x = -1233885649, y = -1081976060}, p2 = {x = -1081976200, 
          y = 11534336}}, right = {p1 = {x = 55246848, y = -1081976200}, 
        p2 = {x = -1081976060, y = 0}}}}, has_limits = 1072693248, limits = {
    p1 = {x = 0, y = -2147483648}, p2 = {x = 0, y = -2147483648}}}
        box = {p1 = {x = 0, y = 1072693248}, p2 = {x = 0, y = 1080254464}}
        extents = {x = 0, y = 0, width = 863, height = 533}
#15 0xb674755b in _cairo_surface_fill (surface=0x966a198, 
    op=CAIRO_OPERATOR_OVER, source=0xbf825c2c, path=0x96b5de4, 
    fill_rule=CAIRO_FILL_RULE_WINDING, tolerance=0.10000000000000001, 
    antialias=CAIRO_ANTIALIAS_DEFAULT) at cairo-surface.c:1586
        status = <value optimized out>
        dev_source = {base = {type = CAIRO_PATTERN_TYPE_SURFACE, ref_count = {
      ref_count = 1}, status = CAIRO_STATUS_SUCCESS, user_data = {size = 0, 
      num_elements = 0, element_size = 12, elements = 0x0, is_snapshot = 0}, 
    matrix = {xx = -nan(0x8000000000000), yx = 0, xy = -nan(0x8000000000000), 
      yy = 1, x0 = -nan(0x8000000000000), y0 = -167}, 
    filter = CAIRO_FILTER_NEAREST, extend = CAIRO_EXTEND_NONE}, solid = {
    base = {type = CAIRO_PATTERN_TYPE_SURFACE, ref_count = {ref_count = 1}, 
      status = CAIRO_STATUS_SUCCESS, user_data = {size = 0, num_elements = 0, 
        element_size = 12, elements = 0x0, is_snapshot = 0}, matrix = {
        xx = -nan(0x8000000000000), yx = 0, xy = -nan(0x8000000000000), 
        yy = 1, x0 = -nan(0x8000000000000), y0 = -167}, 
      filter = CAIRO_FILTER_NEAREST, extend = CAIRO_EXTEND_NONE}, color = {
      red = 2.2459593249214458e-263, green = -0.008963853120803833, 
      blue = 7.8077852107732452e-316, alpha = 1.2731974747767896e-314, 
      red_short = 0, green_short = 32752, blue_short = 0, alpha_short = 0}, 
    content = 2146435072}, surface = {base = {
      type = CAIRO_PATTERN_TYPE_SURFACE, ref_count = {ref_count = 1}, 
      status = CAIRO_STATUS_SUCCESS, user_data = {size = 0, num_elements = 0, 
        element_size = 12, elements = 0x0, is_snapshot = 0}, matrix = {
        xx = -nan(0x8000000000000), yx = 0, xy = -nan(0x8000000000000), 
        yy = 1, x0 = -nan(0x8000000000000), y0 = -167}, 
      filter = CAIRO_FILTER_NEAREST, extend = CAIRO_EXTEND_NONE}, 
    surface = 0x91f7838}, gradient = {base = {base = {
        type = CAIRO_PATTERN_TYPE_SURFACE, ref_count = {ref_count = 1}, 
        status = CAIRO_STATUS_SUCCESS, user_data = {size = 0, 
          num_elements = 0, element_size = 12, elements = 0x0, 
          is_snapshot = 0}, matrix = {xx = -nan(0x8000000000000), yx = 0, 
          xy = -nan(0x8000000000000), yy = 1, x0 = -nan(0x8000000000000), 
          y0 = -167}, filter = CAIRO_FILTER_NEAREST, 
        extend = CAIRO_EXTEND_NONE}, n_stops = 153057336, 
      stops_size = 157720984, stops = 0x0, stops_embedded = {{
          x = -1081975900, color = {red = 7.8077852107732452e-316, 
            green = 1.2731974747767896e-314, blue = 1.0604798301039825e-314, 
            alpha = 1.0604798301039825e-314, red_short = 0, green_short = 0, 
            blue_short = 0, alpha_short = 0}}, {x = 0, color = {
            red = -2.2824754929568996e-46, green = -2.1653516024048295e-46, 
            blue = -2.2329959362613178e-46, alpha = -0.0089648666652772449, 
            red_short = 23512, green_short = 49026, blue_short = 29189, 
            alpha_short = 46707}}}}, linear = {base = {base = {
          type = CAIRO_PATTERN_TYPE_SURFACE, ref_count = {ref_count = 1}, 
          status = CAIRO_STATUS_SUCCESS, user_data = {size = 0, 
            num_elements = 0, element_size = 12, elements = 0x0, 
            is_snapshot = 0}, matrix = {xx = -nan(0x8000000000000), yx = 0, 
            xy = -nan(0x8000000000000), yy = 1, x0 = -nan(0x8000000000000), 
            y0 = -167}, filter = CAIRO_FILTER_NEAREST, 
          extend = CAIRO_EXTEND_NONE}, n_stops = 153057336, 
        stops_size = 157720984, stops = 0x0, stops_embedded = {{
            x = -1081975900, color = {red = 7.8077852107732452e-316, 
              green = 1.2731974747767896e-314, 
              blue = 1.0604798301039825e-314, 
              alpha = 1.0604798301039825e-314, red_short = 0, 
              green_short = 0, blue_short = 0, alpha_short = 0}}, {x = 0, 
            color = {red = -2.2824754929568996e-46, 
              green = -2.1653516024048295e-46, 
              blue = -2.2329959362613178e-46, alpha = -0.0089648666652772449, 
              red_short = 23512, green_short = 49026, blue_short = 29189, 
              alpha_short = 46707}}}}, p1 = {x = 153057336, y = 171798804}, 
      p2 = {x = 1072693248, y = 0}}, radial = {base = {base = {
          type = CAIRO_PATTERN_TYPE_SURFACE, ref_count = {ref_count = 1}, 
          status = CAIRO_STATUS_SUCCESS, user_data = {size = 0, 
            num_elements = 0, element_size = 12, elements = 0x0, 
            is_snapshot = 0}, matrix = {xx = -nan(0x8000000000000), yx = 0, 
            xy = -nan(0x8000000000000), yy = 1, x0 = -nan(0x8000000000000), 
            y0 = -167}, filter = CAIRO_FILTER_NEAREST, 
          extend = CAIRO_EXTEND_NONE}, n_stops = 153057336, 
        stops_size = 157720984, stops = 0x0, stops_embedded = {{
            x = -1081975900, color = {red = 7.8077852107732452e-316, 
              green = 1.2731974747767896e-314, 
              blue = 1.0604798301039825e-314, 
              alpha = 1.0604798301039825e-314, red_short = 0, 
              green_short = 0, blue_short = 0, alpha_short = 0}}, {x = 0, 
            color = {red = -2.2824754929568996e-46, 
              green = -2.1653516024048295e-46, 
              blue = -2.2329959362613178e-46, alpha = -0.0089648666652772449, 
              red_short = 23512, green_short = 49026, blue_short = 29189, 
              alpha_short = 46707}}}}, c1 = {x = 153057336, y = 171798804}, 
      r1 = 1072693248, c2 = {x = 0, y = 171798804}, r2 = 171798520}}}
        __PRETTY_FUNCTION__ = "_cairo_surface_fill"
#16 0xb6737b33 in _cairo_gstate_fill (gstate=0xa3d6ff8, path=0x96b5de4)
    at cairo-gstate.c:1073
        status = <value optimized out>
        pattern = {base = {type = CAIRO_PATTERN_TYPE_SURFACE, ref_count = {
      ref_count = 1}, status = CAIRO_STATUS_SUCCESS, user_data = {size = 0, 
      num_elements = 0, element_size = 12, elements = 0x0, is_snapshot = 0}, 
    matrix = {xx = inf, yx = 0, xy = -nan(0x8000000000000), yy = 1, 
      x0 = -inf, y0 = -167}, filter = CAIRO_FILTER_NEAREST, 
    extend = CAIRO_EXTEND_NONE}, solid = {base = {
      type = CAIRO_PATTERN_TYPE_SURFACE, ref_count = {ref_count = 1}, 
      status = CAIRO_STATUS_SUCCESS, user_data = {size = 0, num_elements = 0, 
        element_size = 12, elements = 0x0, is_snapshot = 0}, matrix = {
        xx = inf, yx = 0, xy = -nan(0x8000000000000), yy = 1, x0 = -inf, 
        y0 = -167}, filter = CAIRO_FILTER_NEAREST, 
      extend = CAIRO_EXTEND_NONE}, color = {red = 3.2685770989252158e-306, 
      green = 2.7160001011472404e-263, blue = -0.0089660289644787963, 
      alpha = 3.6343545152292562e-314, red_short = 0, green_short = 843, 
      blue_short = 0, alpha_short = 168}, content = 10944512}, surface = {
    base = {type = CAIRO_PATTERN_TYPE_SURFACE, ref_count = {ref_count = 1}, 
      status = CAIRO_STATUS_SUCCESS, user_data = {size = 0, num_elements = 0, 
        element_size = 12, elements = 0x0, is_snapshot = 0}, matrix = {
        xx = inf, yx = 0, xy = -nan(0x8000000000000), yy = 1, x0 = -inf, 
        y0 = -167}, filter = CAIRO_FILTER_NEAREST, 
      extend = CAIRO_EXTEND_NONE}, surface = 0x91f7838}, gradient = {base = {
      base = {type = CAIRO_PATTERN_TYPE_SURFACE, ref_count = {ref_count = 1}, 
        status = CAIRO_STATUS_SUCCESS, user_data = {size = 0, 
          num_elements = 0, element_size = 12, elements = 0x0, 
          is_snapshot = 0}, matrix = {xx = inf, yx = 0, 
          xy = -nan(0x8000000000000), yy = 1, x0 = -inf, y0 = -167}, 
        filter = CAIRO_FILTER_NEAREST, extend = CAIRO_EXTEND_NONE}, 
      n_stops = 153057336, stops_size = 8543416, stops = 0x4, 
      stops_embedded = {{x = 158031384, color = {
            red = -0.0089660289644787963, green = 3.6343545152292562e-314, 
            blue = 1.7088567373088623e-305, alpha = 1.6376543626298416e-305, 
            red_short = 0, green_short = 0, blue_short = 0, 
            alpha_short = 843}}, {x = 10944512, color = {
            red = -0.0089679959177563842, green = -2.1774859541887088e-46, 
            blue = 8.4550854446035467e-293, alpha = 5.4073073896972729e-317, 
            red_short = 0, green_short = 0, blue_short = 23664, 
            alpha_short = 2411}}}}, linear = {base = {base = {
          type = CAIRO_PATTERN_TYPE_SURFACE, ref_count = {ref_count = 1}, 
          status = CAIRO_STATUS_SUCCESS, user_data = {size = 0, 
            num_elements = 0, element_size = 12, elements = 0x0, 
            is_snapshot = 0}, matrix = {xx = inf, yx = 0, 
            xy = -nan(0x8000000000000), yy = 1, x0 = -inf, y0 = -167}, 
          filter = CAIRO_FILTER_NEAREST, extend = CAIRO_EXTEND_NONE}, 
        n_stops = 153057336, stops_size = 8543416, stops = 0x4, 
        stops_embedded = {{x = 158031384, color = {
              red = -0.0089660289644787963, green = 3.6343545152292562e-314, 
              blue = 1.7088567373088623e-305, 
              alpha = 1.6376543626298416e-305, red_short = 0, 
              green_short = 0, blue_short = 0, alpha_short = 843}}, {
            x = 10944512, color = {red = -0.0089679959177563842, 
              green = -2.1774859541887088e-46, 
              blue = 8.4550854446035467e-293, 
              alpha = 5.4073073896972729e-317, red_short = 0, 
              green_short = 0, blue_short = 23664, alpha_short = 2411}}}}, 
      p1 = {x = -1081975560, y = -1233980363}, p2 = {x = 158031332, 
        y = 158030960}}, radial = {base = {base = {
          type = CAIRO_PATTERN_TYPE_SURFACE, ref_count = {ref_count = 1}, 
          status = CAIRO_STATUS_SUCCESS, user_data = {size = 0, 
            num_elements = 0, element_size = 12, elements = 0x0, 
            is_snapshot = 0}, matrix = {xx = inf, yx = 0, 
            xy = -nan(0x8000000000000), yy = 1, x0 = -inf, y0 = -167}, 
          filter = CAIRO_FILTER_NEAREST, extend = CAIRO_EXTEND_NONE}, 
        n_stops = 153057336, stops_size = 8543416, stops = 0x4, 
        stops_embedded = {{x = 158031384, color = {
              red = -0.0089660289644787963, green = 3.6343545152292562e-314, 
              blue = 1.7088567373088623e-305, 
              alpha = 1.6376543626298416e-305, red_short = 0, 
              green_short = 0, blue_short = 0, alpha_short = 843}}, {
            x = 10944512, color = {red = -0.0089679959177563842, 
              green = -2.1774859541887088e-46, 
              blue = 8.4550854446035467e-293, 
              alpha = 5.4073073896972729e-317, red_short = 0, 
              green_short = 0, blue_short = 23664, alpha_short = 2411}}}}, 
      c1 = {x = -1081975560, y = -1233980363}, r1 = 158031332, c2 = {
        x = 158030960, y = -1081975496}, r2 = -1233978493}}}
#17 0xb672f19c in *INT_cairo_fill_preserve (cr=0x96b5c70) at cairo.c:2106
        status = <value optimized out>
#18 0xb672f1c2 in cairo_fill (cr=0x96b5c70) at cairo.c:2082
No locals.
#19 0xb7c00cfc in WebCore::BitmapImage::draw (this=0xa38f108, 
    context=0xbf827f34, dst=@0xbf825e3c, src=@0xbf825e2c, 
    op=WebCore::CompositeSourceOver)
    at platform/graphics/cairo/ImageCairo.cpp:100
        dstRect = {m_location = {m_x = 843, m_y = 8108}, m_size = {
    m_width = 0, m_height = 1}}
        image = <value optimized out>
        cr = (cairo_t *) 0x96b5c70
        pattern = <value optimized out>
        matrix = {xx = inf, yx = 0, xy = 0, yy = 1, x0 = 0, y0 = 0}
#20 0xb7aebece in WebCore::GraphicsContext::drawImage (this=0xbf827f34, 
    image=0xa38f108, dest=@0xbf825e8c, src=@0xbf825e7c, 
    op=WebCore::CompositeSourceOver, useLowQualityScale=false)
    at platform/graphics/GraphicsContext.cpp:370
        tsw = 1
        tsh = 1
        tw = 0
        th = 1
        shouldUseLowQualityInterpolation = false

(...)

[Gustavo Noronha (kov)]

This seems to be fixed already. According to krit this was caused by the site using a 1x1 background image; webkit currently handles this differently. The bug seems to be in an older version of cairo, though, since it happens when creating the cairo_pattern.