Closed Bug 1331448 Opened 9 years ago Closed 5 years ago

Startup crash in CoreText@0x50162 via gfxMacPlatformFontList. Bad font?

Categories

(Core :: Graphics, defect, P3)

Product:
Core
Component:
Graphics
Platform:
Unspecified
macOS
Type:
defect

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: wsmwk, Unassigned)

Details

(Keywords: crash, stale-bug, Whiteboard: [tbird crash][startupcrash][gfx-noted])

Crash Data

about 3/4 of crashes are Thunderbird and 1/4 are Firefox. Firefox example bp-5dbdc8d7-5bd5-4002-be1d-b32cb2170116 Thunderbird example for user I've been in conversation with bp-925345bc-4d8e-4f9b-b02e-31e072161229. ============================================================= Ø 0 CoreText CoreText@0x50162 1 XUL gfxMacPlatformFontList::GlobalFontFallback(unsigned int, int, gfxFontStyle const*, unsigned int&, gfxFontFamily**) gfx/thebes/gfxMacPlatformFontList.mm:941 2 XUL gfxPlatformFontList::SystemFindFontForChar(unsigned int, unsigned int, int, gfxFontStyle const*) gfx/thebes/gfxPlatformFontList.cpp:516 3 XUL gfxFontGroup::FindFontForChar(unsigned int, unsigned int, unsigned int, int, gfxFont*, unsigned char*) gfx/thebes/gfxTextRun.cpp:3168 4 XUL void gfxFontGroup::ComputeRanges<char16_t>(nsTArray<gfxTextRange>&, char16_t const*, unsigned int, int, unsigned short) gfx/thebes/gfxTextRun.cpp:2917 5 XUL void gfxFontGroup::InitScriptRun<char16_t>(gfxContext*, gfxTextRun*, char16_t const*, unsigned int, unsigned int, int, gfxMissingFontRecorder*) gfx/thebes/gfxTextRun.cpp:2326 6 XUL void gfxFontGroup::InitTextRun<char16_t>(gfxContext*, gfxTextRun*, char16_t const*, unsigned int, gfxMissingFontRecorder*) gfx/thebes/gfxTextRun.cpp:2255 7 XUL gfxFontGroup::MakeTextRun(char16_t const*, unsigned int, gfxTextRunFactory::Parameters const*, unsigned int, gfxMissingFontRecorder*) gfx/thebes/gfxTextRun.cpp:2121 8 XUL BuildTextRunsScanner::BuildTextRunForFrames(void*) layout/generic/nsTextFrame.cpp:591 9 XUL BuildTextRunsScanner::FlushFrames(bool, bool) layout/generic/nsTextFrame.cpp:1506 10 XUL BuildTextRunsScanner::ScanFrame(nsIFrame*) layout/generic/nsTextFrame.cpp:1753 11 XUL BuildTextRunsScanner::ScanFrame(nsIFrame*) layout/generic/nsTextFrame.cpp:1793 12 XUL BuildTextRunsScanner::ScanFrame(nsIFrame*) layout/generic/nsTextFrame.cpp:1793 13 XUL nsTextFrame::EnsureTextRun(nsTextFrame::TextRunType, gfxContext*, nsIFrame*, nsLineList_iterator const*, unsigned int*) layout/generic/nsTextFrame.cpp:1410 14 XUL nsTextFrame::AddInlineMinISizeForFlow(nsRenderingContext*, nsIFrame::InlineMinISizeData*, nsTextFrame::TextRunType) layout/generic/nsTextFrame.cpp:7811 15 XUL nsTextFrame::AddInlineMinISize(nsRenderingContext*, nsIFrame::InlineMinISizeData*) layout/generic/nsTextFrame.cpp:7967 16 XUL nsContainerFrame::DoInlineIntrinsicISize(nsRenderingContext*, nsIFrame::InlineIntrinsicISizeData*, nsLayoutUtils::IntrinsicISizeType) layout/generic/nsContainerFrame.cpp:857 17 XUL nsContainerFrame::DoInlineIntrinsicISize(nsRenderingContext*, nsIFrame::InlineIntrinsicISizeData*, nsLayoutUtils::IntrinsicISizeType) layout/generic/nsContainerFrame.cpp:857 A somewhat less common signature is CoreText@0x30e52 - mostly Firefox (eg. bp-a83778c8-804f-4341-844b-6e2c92170116) but a few Thunderbird (eg. bp-b6fd5f77-9802-49d7-9db2-0e7802161226)
The user provided CONSOLE output. "shows the following when I tried to start Thunderbird 50.0 and then Thunderbird 51.0b (beta)" 1/16/17 1:49:59.938 PM Mail[208]: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server 1/16/17 1:49:59.938 PM Mail[208]: CoreText CopyFontsForRequest received mig IPC error (FFFFFFFFFFFFFECC) from font server 1/16/17 1:50:57.872 PM WindowServer[145]: CGXGetConnectionProperty: Invalid connection 81411 1/16/17 1:50:57.925 PM Console[211]: Failed to connect (_consoleX) outlet from (NSApplication) to (ConsoleX): missing setter or instance variable 1/16/17 1:51:09.132 PM thunderbird[449]: WARNING: The Gestalt selector gestaltSystemVersion is returning 10.9.5 instead of 10.10.5. Use NSProcessInfo's operatingSystemVersion property to get correct system version number. Call location: 1/16/17 1:51:09.132 PM thunderbird[449]: 0 CarbonCore 0x00007fff93f7b2b7 ___Gestalt_SystemVersion_block_invoke + 113 1/16/17 1:51:09.132 PM thunderbird[449]: 1 libdispatch.dylib 0x00007fff88b7ce73 _dispatch_client_callout + 8 1/16/17 1:51:09.132 PM thunderbird[449]: 2 libdispatch.dylib 0x00007fff88b7cd86 dispatch_once_f + 117 1/16/17 1:51:09.132 PM thunderbird[449]: 3 CarbonCore 0x00007fff93f04456 _Gestalt_SystemVersion + 987 1/16/17 1:51:09.132 PM thunderbird[449]: 4 CarbonCore 0x00007fff93f036e3 Gestalt + 144 1/16/17 1:51:09.132 PM thunderbird[449]: 5 XUL 0x000000010e582920 vpx_reset_mmx_state + 662603 1/16/17 1:51:10.391 PM com.apple.xpc.launchd[1]: (org.mozilla.thunderbird.239160[449]) Service exited with abnormal code: 1 1/16/17 1:51:17.415 PM thunderbird[454]: WARNING: The Gestalt selector gestaltSystemVersion is returning 10.9.5 instead of 10.10.5. Use NSProcessInfo's operatingSystemVersion property to get correct system version number. Call location: 1/16/17 1:51:17.415 PM thunderbird[454]: 0 CarbonCore 0x00007fff93f7b2b7 ___Gestalt_SystemVersion_block_invoke + 113 1/16/17 1:51:17.415 PM thunderbird[454]: 1 libdispatch.dylib 0x00007fff88b7ce73 _dispatch_client_callout + 8 1/16/17 1:51:17.415 PM thunderbird[454]: 2 libdispatch.dylib 0x00007fff88b7cd86 dispatch_once_f + 117 1/16/17 1:51:17.415 PM thunderbird[454]: 3 CarbonCore 0x00007fff93f04456 _Gestalt_SystemVersion + 987 1/16/17 1:51:17.415 PM thunderbird[454]: 4 CarbonCore 0x00007fff93f036e3 Gestalt + 144 1/16/17 1:51:17.415 PM thunderbird[454]: 5 XUL 0x0000000103ff0920 vpx_reset_mmx_state + 662603 1/16/17 1:51:18.651 PM com.apple.xpc.launchd[1]: (org.mozilla.thunderbird.312432[454]) Service exited with abnormal code: 1 1/16/17 1:51:26.486 PM com.apple.SecurityServer[77]: Session 100007 created 1/16/17 1:51:27.216 PM mdworker[458]: code validation failed in the process of getting signing information: Error Domain=NSOSStatusErrorDomain Code=-67062 "The operation couldn’t be completed. (OSStatus error -67062.)" UserInfo=0x7fc4f253a0d0 {SecCSArchitecture=ppc} 1/16/17 1:51:27.272 PM mdworker[458]: code validation failed in the process of getting signing information: Error Domain=NSOSStatusErrorDomain Code=-67062 "The operation couldn’t be completed. (OSStatus error -67062.)" UserInfo=0x7fc4f268c2f0 {SecCSArchitecture=i386} 1/16/17 1:53:00.692 PM mDNSResponder[88]: AwdlD2d AwdlD2dStartBrowsingForKey: '5ad0bdefff1ea1cc00000000000008efip6arpa' Browsing service started 1/16/17 1:53:00.970 PM mDNSResponder[88]: AwdlD2d AwdlD2dStopBrowsingForKey: '5ad0bdefff1ea1cc00000000000008efip6arpa' Browsing service stopped
This looks to me like it could result from a local system issue such as a corrupted font. Are we getting reports from a large number of _different_ users, or a bunch of reports that may come from a single installation?
Priority: -- → P1
Whiteboard: [tbird crash][startupcrash] → [tbird crash][startupcrash][gfx-noted]
(In reply to Jonathan Kew (:jfkthame) from comment #2) > This looks to me like it could result from a local system issue such as a > corrupted font. Are we getting reports from a large number of _different_ > users, or a bunch of reports that may come from a single installation? Smallish number of users for this signature. For one month period, faceting crashes on email yields an approximation of 10-20 users for 276 crashes. 203 of those crashes is the user on whose behalf I filed this bug report. There may be other crash signatures (all low volume) that are matches to this bug in https://crash-stats.mozilla.com/search/?signature=~CoreText%40&date=%3E%3D2016-12-17T11%3A32%3A24.000Z&date=%3C2017-01-17T11%3A32%3A24.000Z&_sort=-date&_facets=signature&_facets=install_time&_facets=version&_columns=date&_columns=product&_columns=version&_columns=user_comments#facet-install_time -- I haven't checked them
OK. My hunch -- with no concrete evidence to support it, I admit, but from looking at the crash stack and the relevant code -- is that the user has a bad font of some kind. Can you suggest they try removing all non-standard fonts they have installed, and see if that makes any difference? Could also be some other kind of system corruption, I guess, but I think a rogue font is the likeliest candidate.
The reporter hasn't shown up yet. So here is some information from him... I’m a graphic designer so I usually have a large number of fonts installed. I used to use Linotype Font Explorer X but now mostly just use the Apple Font Book to activate fonts. Many of the Apple fonts are protected and can’t be disabledor deleted. Can you determine any specific font that could be causing the crashes? The crashing only happens on my MacBook Pro which is only about 2 years old. I’m also a part-time musician so I have some music writing software (Finale Songwriter) that uses some proprietary fonts that have ben installed. Again it doesn’t cause Apple Mail to crash on the MacBook Pro or the iMac. A few weeks ago (when Thunderbird wouldn’t start without crashing) ... I hope you can figure out what is causing this. I don’t really like the Apple Mail interface but at least it doesn’t crash.
Summary: Startup crash in CoreText@0x50162 via gfxMacPlatformFontList → Startup crash in CoreText@0x50162 via gfxMacPlatformFontList. Bad font?
update from reporter.. I disabled nearly all of my fonts — not a trivial task with over 700 fonts. Apple’s FontBook won’t let you disable/uninstall fonts that are required by the operating system. However, it doesn’t indicate WHICH fonts these are so you have to go through and try to disable a group of fonts, get a warning that there are required fonts in the group and, through a process of elimination, leave the necessary fonts active. I got it down to about between 1 or 2 dozen fonts and **all these fonts pass FontBook’s “validation” test**. But, even after restarting a couple of times, Thunderbird still crashes immediately upon opening. I tried version 51.0b (BETA), 50.0b and 45.5.1 (you probably have the crash reports) and they all do the same thing: double click on the icon, a window starts to open for a fraction of a second only to collapse in to the crash dialog box. So it seems unlikely the problem is caused by a corrupted font. For now I will simply have to use the native Apple Mail
his crashes from today, with those fonts disabled: bp-629522d9-6975-4d34-a48f-aa9b12170129 tb45.5.1 bp-d50c5399-ddd9-4ffd-b20e-8e51b2170129 tb51.0b1 bp-06a16e11-f64d-4b2b-8dc2-15c3e2170129 tb51.0b1 oldest crash I find on crash-stats is bp-92aecf18-df7e-4bee-9052-65fb82160811 45.2.0, from a different user
His 52.x and 53.x crashes are [@ CoreText@0x50122 ]. And afaict he is the only one crashing - multiple per day
Crash Signature: [@ CoreText@0x50162] → [@ CoreText@0x50162 ] [@ CoreText@0x50122 ]
Crash Signature: [@ CoreText@0x50162 ] [@ CoreText@0x50122 ] → [@ CoreText@0x50162 ] [@ CoreText@0x50122 ] [@ CoreText@0x500f2 ]
This is a P1 bug without an assignee. P1 are bugs which are being worked on for the current release cycle/iteration/sprint. If the bug is not assigned by Monday, 28 August, the bug's priority will be reset to '--'.
Keywords: stale-bug
90+% of THunderbird crashes were one user, whose crashes ended 3 months ago with bp-e76aa19d-0ea7-4da4-ad9f-1dd140170621
Moving to p3 because no activity for at least 24 weeks.
Priority: P1 → P3

Not sure if related, but I started seeing this in the console after the latest build of today, and the font used on daily is incorrect.

2020-09-29 19:37:33.437 thunderbird[44706:6655226] CoreText note: Client requested name ".SFNS-Regular", 
it will get Times-Roman rather than the intended font. All system UI font access should be through proper
APIs such as CTFontCreateUIFontForLanguage() or +[NSFont systemFontOfSize:].
2020-09-29 19:37:33.437 thunderbird[44706:6655226] CoreText note: Set a breakpoint on 
CTFontLogSystemFontNameRequest to debug.

Closing because no crashes reported for 12 weeks.

Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.