Closed Bug 1663790 Opened 4 years ago Closed 4 years ago

Crash in [@ mozilla::fontlist::FontList::Alloc]

Categories

(Core :: Layout: Text and Fonts, defect)

defect

Tracking

()

RESOLVED FIXED
82 Branch
Tracking Status
firefox-esr68 --- unaffected
firefox-esr78 --- unaffected
firefox80 --- unaffected
firefox81 --- unaffected
firefox82 + fixed

People

(Reporter: aryx, Assigned: jfkthame)

References

(Regression)

Details

(Keywords: crash, regression)

Crash Data

Attachments

(1 file)

This is a regression from bug 1533462 (same crash signatures can also be observed when it landed in late June).

Crash report: https://crash-stats.mozilla.org/report/index/36494a4c-b8b2-474f-84ea-6fd170200908

Top 10 frames of crashing thread:

0 libxul.so mozilla::fontlist::FontList::Alloc gfx/thebes/SharedFontList.cpp:690
1 libxul.so mozilla::fontlist::FontList::SetLocalNames gfx/thebes/SharedFontList.cpp:817
2 libxul.so gfxPlatformFontList::InitFontList gfx/thebes/gfxPlatformFontList.cpp:504
3 libxul.so gfxPlatformGtk::CreatePlatformFontList gfx/thebes/gfxPlatformGtk.cpp:241
4 libxul.so gfxPlatform::Init gfx/thebes/gfxPlatform.cpp:991
5 libxul.so gfxPlatform::GetPlatform gfx/thebes/gfxPlatform.cpp:509
6 libxul.so mozilla::widget::GfxInfoBase::GetContentBackend widget/GfxInfoBase.cpp:1760
7 libxul.so NS_InvokeByIndex 
8 libxul.so XPCWrappedNative::CallMethod js/xpconnect/src/XPCWrappedNative.cpp:1141
9 libxul.so XPC_WN_GetterSetter js/xpconnect/src/XPCWrappedNativeJSOps.cpp:986
Flags: needinfo?(jfkthame)

Ah, I see how this would happen - if there's a very large number of fonts installed, the array we're trying to allocate here could exceed the SHM_BLOCK_SIZE limit. I have a patch in progress that will fix this.

Flags: needinfo?(jfkthame)
Assignee: nobody → jfkthame
Status: NEW → ASSIGNED
Severity: -- → S2

Jonathan can you take a look at the patch?

Flags: needinfo?(jwatt)

Yup - done.

Flags: needinfo?(jwatt)
Pushed by jkew@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/14b425483d95 Support oversized shared-memory blocks in the font list when needed for large allocations. r=jwatt
Status: ASSIGNED → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
Target Milestone: --- → 82 Branch
Has Regression Range: --- → yes
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: