Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6301771

REGRESSION: VM crashed when a image of particular size is drawn on a Canvas

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: P3
    • Resolution: Fixed
    • Affects Version/s: 2.0, 5.0, 5.0u2
    • Fix Version/s: 6
    • Component/s: client-libs
    • Labels:
    • Subcomponent:
      2d
    • Introduced In Version:
    • Resolved In Build:
      b51
    • CPU:
      generic, x86
    • OS:
      generic, solaris_10, windows_2000, windows_xp

      Backports

        Description

        FULL PRODUCT VERSION :
        java version "1.5.0_03"
        Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_03-b07)
        Java HotSpot(TM) Client VM (build 1.5.0_03-b07, mixed mode, sharing)


        ADDITIONAL OS VERSION INFORMATION :
        Microsoft Windows XP [Version 5.1.2600]

        EXTRA RELEVANT SYSTEM CONFIGURATION :
        Happens in all Windows XP machines

        A DESCRIPTION OF THE PROBLEM :

        The application draws a jpeg image of size "360 x 510" pixels on a canvas at x=6 ,y=6 ,width=84 and height = 119, using the following code.

        g.drawImage(img,rect.x, rect.y, rect.width, rect.height,0,0,img.getWidth(null),img.getHeight(null), this);

        Application crashes when "drawImage" is called.

        Note that if image of size "510x360" pixels is draw using the same code at x = 6, y=6,widht=119 and height=84 then the image is displayed as tiled horizontally.

        STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
        1. Launch this application in JRE1.5.0_02 or JRE1.5.0_03.
        2. This displays a application main window
        3. Click on the "Load File" button and load a image of size 360 x 510 pixels jpg image ( you can use gif image too)
        4. The application will crash.
        The above can be reproduced with image size of 255 x 255 also.
        #This problem does not happen with JRE versions before JRE1.5.0_02

        EXPECTED VERSUS ACTUAL BEHAVIOR :
        EXPECTED -
        The image should be painted on the screen

        ACTUAL -
        Application crashes

        ERROR MESSAGES/STACK TRACES THAT OCCUR :
        #
        # An unexpected error has been detected by HotSpot Virtual Machine:
        #
        # EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x6d022110, pid=416, tid=592
        #
        # Java VM: Java HotSpot(TM) Client VM (1.5.0_03-b07 mixed mode, sharing)
        # Problematic frame:
        # C [awt.dll+0x22110]
        #

        --------------- T H R E A D ---------------

        Current thread (0x10e4d818): JavaThread "AWT-EventQueue-0" [_thread_in_native, id=592]

        siginfo: ExceptionCode=0xc0000005, reading address 0x22fa5c38

        Registers:
        EAX=0x22fa5c30, EBX=0x00000002, ECX=0x00000017, EDX=0x0133ecae
        ESP=0x1167f30c, EBP=0x1167f4f8, ESI=0x141783b0, EDI=0x0000009f
        EIP=0x6d022110, EFLAGS=0x00010202

          Top of Stack: (sp=0x1167f30c)
        0x1167f30c: 0267d95b 00000017 00000006 6d0023f6
        0x1167f31c: 22fe5434 000003fc 0000009f 0000006a
        0x1167f32c: 0133ecae 80b3ec85 0267d95b 0267d95b
        0x1167f33c: 00000017 00000000 1167f408 6d11f2d8
        0x1167f34c: 1167f3fc 10e4d818 2ab86158 2b3f5208
        0x1167f35c: 0267d95b 0133ecae 0267d95b 00000006
        0x1167f36c: 1167f3e8 6d11f2d8 10e4fe70 00aa5ed8
        0x1167f37c: 000000ff 0133ecae 404a8000 10e4d818

        Instructions: (pc=0x6d022110)
        0x6d022100: 24 20 0f af 44 24 14 03 c3 8b da 83 c6 04 d3 fb
        0x6d022110: 8b 1c 98 89 5e fc 8b 5c 24 28 03 d3 4f 75 ea 8b


        Stack: [0x11640000,0x11680000), sp=0x1167f30c, free space=252k
        Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
        C [awt.dll+0x22110]
        j sun.java2d.loops.ScaledBlit.Scale(Lsun/java2d/SurfaceData;Lsun/java2d/SurfaceData;Ljava/awt/Composite;Lsun/java2d/pipe/Region;IIIIDDDD)V+0
        j sun.java2d.pipe.DrawImage.scaleSurfaceData(Lsun/java2d/SunGraphics2D;Lsun/java2d/pipe/Region;Lsun/java2d/SurfaceData;Lsun/java2d/SurfaceData;Lsun/java2d/loops/SurfaceType;Lsun/java2d/loops/SurfaceType;IIIIDDDD)Z+72
        j sun.java2d.pipe.DrawImage.renderImageScale(Lsun/java2d/SunGraphics2D;Ljava/awt/Image;Ljava/awt/Color;IIIIIDDDD)Z+95
        j sun.java2d.pipe.DrawImage.scaleImage(Lsun/java2d/SunGraphics2D;Ljava/awt/Image;IIIIIIIILjava/awt/Color;)Z+248
        j sun.java2d.pipe.DrawImage.scaleImage(Lsun/java2d/SunGraphics2D;Ljava/awt/Image;IIIIIIIILjava/awt/Color;Ljava/awt/image/ImageObserver;)Z+27
        j sun.java2d.SunGraphics2D.drawImage(Ljava/awt/Image;IIIIIIIILjava/awt/Color;Ljava/awt/image/ImageObserver;)Z+182
        j sun.awt.image.ImageRepresentation.drawToBufImage(Ljava/awt/Graphics;Lsun/awt/image/ToolkitImage;IIIIIIIILjava/awt/Color;Ljava/awt/image/ImageObserver;)Z+164
        j sun.java2d.pipe.DrawImage.scaleImage(Lsun/java2d/SunGraphics2D;Ljava/awt/Image;IIIIIIIILjava/awt/Color;Ljava/awt/image/ImageObserver;)Z+80
        j sun.java2d.SunGraphics2D.drawImage(Ljava/awt/Image;IIIIIIIILjava/awt/Color;Ljava/awt/image/ImageObserver;)Z+182
        j sun.java2d.SunGraphics2D.drawImage(Ljava/awt/Image;IIIIIIIILjava/awt/image/ImageObserver;)Z+19
        j ScaledBltCrash$ImageCanvas.paint(Ljava/awt/Graphics;)V+83
        j sun.awt.RepaintArea.paintComponent(Ljava/awt/Component;Ljava/awt/Graphics;)V+6
        j sun.awt.RepaintArea.paint(Ljava/lang/Object;Z)V+326
        j sun.awt.windows.WComponentPeer.handleEvent(Ljava/awt/AWTEvent;)V+63
        j java.awt.Component.dispatchEventImpl(Ljava/awt/AWTEvent;)V+765
        j java.awt.Component.dispatchEvent(Ljava/awt/AWTEvent;)V+2
        j java.awt.EventQueue.dispatchEvent(Ljava/awt/AWTEvent;)V+46
        j java.awt.EventDispatchThread.pumpOneEventForHierarchy(ILjava/awt/Component;)Z+233
        j java.awt.EventDispatchThread.pumpEventsForHierarchy(ILjava/awt/Conditional;Ljava/awt/Component;)V+26
        j java.awt.EventDispatchThread.pumpEvents(ILjava/awt/Conditional;)V+4
        j java.awt.EventDispatchThread.pumpEvents(Ljava/awt/Conditional;)V+3
        j java.awt.EventDispatchThread.run()V+9
        v ~StubRoutines::call_stub
        V [jvm.dll+0x818b8]
        V [jvm.dll+0xd431d]
        V [jvm.dll+0x81789]
        V [jvm.dll+0x814e6]
        V [jvm.dll+0x9c06b]
        V [jvm.dll+0xfe7f5]
        V [jvm.dll+0xfe7c3]
        C [MSVCRT.dll+0x27fb8]
        C [kernel32.dll+0x202ed]

        Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
        j sun.java2d.loops.ScaledBlit.Scale(Lsun/java2d/SurfaceData;Lsun/java2d/SurfaceData;Ljava/awt/Composite;Lsun/java2d/pipe/Region;IIIIDDDD)V+0
        j sun.java2d.pipe.DrawImage.scaleSurfaceData(Lsun/java2d/SunGraphics2D;Lsun/java2d/pipe/Region;Lsun/java2d/SurfaceData;Lsun/java2d/SurfaceData;Lsun/java2d/loops/SurfaceType;Lsun/java2d/loops/SurfaceType;IIIIDDDD)Z+72
        j sun.java2d.pipe.DrawImage.renderImageScale(Lsun/java2d/SunGraphics2D;Ljava/awt/Image;Ljava/awt/Color;IIIIIDDDD)Z+95
        j sun.java2d.pipe.DrawImage.scaleImage(Lsun/java2d/SunGraphics2D;Ljava/awt/Image;IIIIIIIILjava/awt/Color;)Z+248
        j sun.java2d.pipe.DrawImage.scaleImage(Lsun/java2d/SunGraphics2D;Ljava/awt/Image;IIIIIIIILjava/awt/Color;Ljava/awt/image/ImageObserver;)Z+27
        j sun.java2d.SunGraphics2D.drawImage(Ljava/awt/Image;IIIIIIIILjava/awt/Color;Ljava/awt/image/ImageObserver;)Z+182
        j sun.awt.image.ImageRepresentation.drawToBufImage(Ljava/awt/Graphics;Lsun/awt/image/ToolkitImage;IIIIIIIILjava/awt/Color;Ljava/awt/image/ImageObserver;)Z+164
        j sun.java2d.pipe.DrawImage.scaleImage(Lsun/java2d/SunGraphics2D;Ljava/awt/Image;IIIIIIIILjava/awt/Color;Ljava/awt/image/ImageObserver;)Z+80
        j sun.java2d.SunGraphics2D.drawImage(Ljava/awt/Image;IIIIIIIILjava/awt/Color;Ljava/awt/image/ImageObserver;)Z+182
        j sun.java2d.SunGraphics2D.drawImage(Ljava/awt/Image;IIIIIIIILjava/awt/image/ImageObserver;)Z+19
        j ScaledBltCrash$ImageCanvas.paint(Ljava/awt/Graphics;)V+83
        j sun.awt.RepaintArea.paintComponent(Ljava/awt/Component;Ljava/awt/Graphics;)V+6
        j sun.awt.RepaintArea.paint(Ljava/lang/Object;Z)V+326
        j sun.awt.windows.WComponentPeer.handleEvent(Ljava/awt/AWTEvent;)V+63
        j java.awt.Component.dispatchEventImpl(Ljava/awt/AWTEvent;)V+765
        j java.awt.Component.dispatchEvent(Ljava/awt/AWTEvent;)V+2
        j java.awt.EventQueue.dispatchEvent(Ljava/awt/AWTEvent;)V+46
        j java.awt.EventDispatchThread.pumpOneEventForHierarchy(ILjava/awt/Component;)Z+233
        j java.awt.EventDispatchThread.pumpEventsForHierarchy(ILjava/awt/Conditional;Ljava/awt/Component;)V+26
        j java.awt.EventDispatchThread.pumpEvents(ILjava/awt/Conditional;)V+4
        j java.awt.EventDispatchThread.pumpEvents(Ljava/awt/Conditional;)V+3
        j java.awt.EventDispatchThread.run()V+9
        v ~StubRoutines::call_stub

        --------------- P R O C E S S ---------------

        Java Threads: ( => current thread )
          0x10e51390 JavaThread "Image Fetcher 0" daemon [_thread_in_native, id=904]
          0x00035fd8 JavaThread "DestroyJavaVM" [_thread_blocked, id=284]
        =>0x10e4d818 JavaThread "AWT-EventQueue-0" [_thread_in_native, id=592]
          0x10e49408 JavaThread "AWT-Windows" daemon [_thread_in_native, id=3112]
          0x10e49088 JavaThread "AWT-Shutdown" [_thread_blocked, id=2480]
          0x10e45820 JavaThread "Java2D Disposer" daemon [_thread_blocked, id=3128]
          0x00a77b50 JavaThread "Low Memory Detector" daemon [_thread_blocked, id=3312]
          0x00a76728 JavaThread "CompilerThread0" daemon [_thread_blocked, id=2624]
          0x00a75a40 JavaThread "Signal Dispatcher" daemon [_thread_blocked, id=3412]
          0x00a71c08 JavaThread "Finalizer" daemon [_thread_blocked, id=608]
          0x00a70728 JavaThread "Reference Handler" daemon [_thread_blocked, id=3492]

        Other Threads:
          0x00a6de88 VMThread [id=1616]
          0x00a78d60 WatcherThread [id=108]

        VM state:not at safepoint (normal execution)

        VM Mutex/Monitor currently owned by a thread: None

        Heap
         def new generation total 576K, used 312K [0x22ad0000, 0x22b70000, 0x22fb0000)
          eden space 512K, 49% used [0x22ad0000, 0x22b0f280, 0x22b50000)
          from space 64K, 93% used [0x22b50000, 0x22b5ef48, 0x22b60000)
          to space 64K, 0% used [0x22b60000, 0x22b60000, 0x22b70000)
         tenured generation total 1408K, used 500K [0x22fb0000, 0x23110000, 0x26ad0000)
           the space 1408K, 35% used [0x22fb0000, 0x2302d2e0, 0x2302d400, 0x23110000)
         compacting perm gen total 8192K, used 193K [0x26ad0000, 0x272d0000, 0x2aad0000)
           the space 8192K, 2% used [0x26ad0000, 0x26b00610, 0x26b00800, 0x272d0000)
            ro space 8192K, 62% used [0x2aad0000, 0x2afd8850, 0x2afd8a00, 0x2b2d0000)
            rw space 12288K, 46% used [0x2b2d0000, 0x2b85ced8, 0x2b85d000, 0x2bed0000)

        Dynamic libraries:
        0x00400000 - 0x0040c000 C:\Program Files\Java\jre1.5.0_03\bin\java.exe
        0x77f50000 - 0x77ff9000 C:\WINDOWS\System32\ntdll.dll
        0x77e20000 - 0x77f42000 C:\WINDOWS\system32\kernel32.dll
        0x77d80000 - 0x77e19000 C:\WINDOWS\system32\ADVAPI32.dll
        0x77c70000 - 0x77ce5000 C:\WINDOWS\system32\RPCRT4.dll
        0x77bc0000 - 0x77c13000 C:\WINDOWS\system32\MSVCRT.dll
        0x6d640000 - 0x6d7c6000 C:\Program Files\Java\jre1.5.0_03\bin\client\jvm.dll
        0x77cf0000 - 0x77d7d000 C:\WINDOWS\system32\USER32.dll
        0x77c20000 - 0x77c60000 C:\WINDOWS\system32\GDI32.dll
        0x76af0000 - 0x76b1c000 C:\WINDOWS\System32\WINMM.dll
        0x762e0000 - 0x762fa000 C:\WINDOWS\System32\IMM32.DLL
        0x60740000 - 0x60748000 C:\WINDOWS\System32\LPK.DLL
        0x72ef0000 - 0x72f4a000 C:\WINDOWS\System32\USP10.dll
        0x6d280000 - 0x6d288000 C:\Program Files\Java\jre1.5.0_03\bin\hpi.dll
        0x76ba0000 - 0x76bab000 C:\WINDOWS\System32\PSAPI.DLL
        0x6d610000 - 0x6d61c000 C:\Program Files\Java\jre1.5.0_03\bin\verify.dll
        0x6d300000 - 0x6d31d000 C:\Program Files\Java\jre1.5.0_03\bin\java.dll
        0x6d630000 - 0x6d63f000 C:\Program Files\Java\jre1.5.0_03\bin\zip.dll
        0x6d000000 - 0x6d167000 C:\Program Files\Java\jre1.5.0_03\bin\awt.dll
        0x72f50000 - 0x72f73000 C:\WINDOWS\System32\WINSPOOL.DRV
        0x77160000 - 0x7727a000 C:\WINDOWS\system32\ole32.dll
        0x58730000 - 0x58764000 C:\WINDOWS\system32\uxtheme.dll
        0x51000000 - 0x5104d000 C:\WINDOWS\System32\ddraw.dll
        0x73b10000 - 0x73b16000 C:\WINDOWS\System32\DCIMAN32.dll
        0x5c000000 - 0x5c0c8000 C:\WINDOWS\System32\D3DIM700.DLL
        0x6d240000 - 0x6d27d000 C:\Program Files\Java\jre1.5.0_03\bin\fontmanager.dll
        0x67320000 - 0x6734f000 C:\PROGRA~1\COMMON~1\SYMANT~1\ANTISPAM\asOEHook.dll
        0x7c340000 - 0x7c396000 C:\WINDOWS\System32\MSVCR71.dll
        0x74660000 - 0x746ab000 C:\WINDOWS\System32\MSCTF.dll
        0x11170000 - 0x1117e000 C:\Program Files\Sony\Jog Dial Navigator\WMHook.dll
        0x63000000 - 0x63014000 C:\WINDOWS\System32\SynTPFcs.dll
        0x77bb0000 - 0x77bb7000 C:\WINDOWS\system32\VERSION.dll
        0x3a700000 - 0x3a754000 C:\WINDOWS\System32\imjp81.ime
        0x648f0000 - 0x649bc000 C:\WINDOWS\System32\IMJP81K.DLL
        0x772f0000 - 0x7737b000 C:\WINDOWS\system32\COMCTL32.DLL
        0x77380000 - 0x77b74000 C:\WINDOWS\system32\SHELL32.DLL
        0x77280000 - 0x772e3000 C:\WINDOWS\system32\SHLWAPI.dll
        0x71950000 - 0x71a34000 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll
        0x3b100000 - 0x3b11c000 C:\WINDOWS\IME\IMJP8_1\Dicts\IMJPCD.DIC
        0x770d0000 - 0x7715b000 C:\WINDOWS\system32\oleaut32.dll
        0x76300000 - 0x76345000 C:\WINDOWS\system32\COMDLG32.DLL
        0x75e90000 - 0x75ead000 C:\WINDOWS\system32\appHelp.dll
        0x76f80000 - 0x76ff8000 C:\WINDOWS\System32\CLBCATQ.DLL
        0x77000000 - 0x770c5000 C:\WINDOWS\System32\COMRes.dll
        0x76570000 - 0x765be000 C:\WINDOWS\System32\cscui.dll
        0x76550000 - 0x7656b000 C:\WINDOWS\System32\CSCDLL.dll
        0x75ed0000 - 0x75fcc000 C:\WINDOWS\System32\browseui.dll
        0x765c0000 - 0x7670a000 C:\WINDOWS\System32\SETUPAPI.dll
        0x76940000 - 0x76964000 C:\WINDOWS\System32\ntshrui.dll
        0x76ad0000 - 0x76ae5000 C:\WINDOWS\System32\ATL.DLL
        0x71b70000 - 0x71bbf000 C:\WINDOWS\System32\NETAPI32.dll
        0x52880000 - 0x52923000 C:\WINDOWS\system32\USERENV.dll
        0x71700000 - 0x71848000 C:\WINDOWS\System32\shdocvw.dll
        0x6d3c0000 - 0x6d3df000 C:\Program Files\Java\jre1.5.0_03\bin\jpeg.dll

        VM Arguments:
        java_command: ScaledBltCrash

        Environment Variables:
        JAVA_HOME=c:\j2sdk1.4.0
        CLASSPATH=.;.;C:\PROGRA~1\JMF21~1.1\lib\sound.jar;C:\PROGRA~1\JMF21~1.1\lib\jmf.jar;C:\WINDOWS\Java\Classes\Swingall.jar;.;C:\WINDOWS\Java\Classes\PcdrAPI.zip;.;C:\WINDOWS\java\classes;.
        PATH=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Justsystem\JSLIB32;C:\Program Files\Sony\SimpleDVDMaker\AS_Libs;C:\jwsdp-1.2\jwsdp-shared\bin
        USERNAME=kp-iknow
        OS=Windows_NT
        PROCESSOR_IDENTIFIER=x86 Family 15 Model 2 Stepping 4, GenuineIntel


        --------------- S Y S T E M ---------------

        OS: Windows XP Build 2600

        CPU:total 1 family 15, cmov, cx8, fxsr, mmx, sse, sse2, ht

        Memory: 4k page, physical 523244k(74836k free), swap 1018048k(525376k free)

        vm_info: Java HotSpot(TM) Client VM (1.5.0_03-b07) for windows-x86, built on Apr 13 2005 02:07:01 by "java_re" with MS VC++ 6.0


        REPRODUCIBILITY :
        This bug can be reproduced always.

        Release Regression From : 5.0
        The above release value was the last known release where this
        bug was known to work. Since then there has been a regression.

        Release Regression From : 5.0
        The above release value was the last known release where this
        bug was known to work. Since then there has been a regression.

          Attachments

            Issue Links

              Activity

                People

                Assignee:
                flar Jim Graham
                Reporter:
                igor Igor Nekrestyanov (Inactive)
                Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                  Dates

                  Created:
                  Updated:
                  Resolved:
                  Imported:
                  Indexed: