1794699 - Crash in [@ nsFontCache::GetMetricsFor]

Status: NEW

(Core :: Layout: Text and Fonts, defect)

Description

[Daniel Holbert [:dholbert]]

Crash report: https://crash-stats.mozilla.org/report/index/81d683bf-9c12-417d-8170-82a8b0221006

Reason: EXCEPTION_ACCESS_VIOLATION_READ

Top 10 frames of crashing thread:

0 xul.dll nsFontCache::GetMetricsFor gfx/src/nsFontCache.cpp:92
1 xul.dll nsLineLayout::ReflowFrame layout/generic/nsLineLayout.cpp:1057
2 xul.dll nsBlockFrame::ReflowLine layout/generic/nsBlockFrame.cpp:3261
3 xul.dll nsBlockReflowContext::ReflowBlock layout/generic/nsBlockReflowContext.cpp:290
4 xul.dll nsBlockFrame::ReflowFloat layout/generic/nsBlockFrame.cpp:6651
5 xul.dll mozilla::BlockReflowState::FlowAndPlaceFloat layout/generic/BlockReflowState.cpp:862
6 xul.dll mozilla::BlockReflowState::AddFloat layout/generic/BlockReflowState.cpp:590
7 xul.dll nsLineLayout::ReflowFrame layout/generic/nsLineLayout.cpp:914
8 xul.dll nsBlockFrame::ReflowLine layout/generic/nsBlockFrame.cpp:3261
9 xul.dll nsBlockFrame::ReflowLine layout/generic/nsBlockFrame.cpp:3258

(This crash signature was originally classified under bug 866767, but I don't think the crashes we're getting with this signature nowadays are related to what that bug was originally filed about, so I'm spinning it off.)

Comment 1

[Daniel Holbert [:dholbert]]

(Note that bug 1794695 also has some crashes inside of GetMetricsFor -- those ones seem to be tripping over a busted nsFont instance. I'm not sure if those crashes are closer to that bug or closer to this bug.)