246836 - Ff 0.9 crashes on navigating to specified site [@ GetNormalLineHeight() ][@ nsTextFrame::TextStyle::TextStyle() ]

Status: RESOLVED DUPLICATE of bug 180309

(Core Graveyard :: GFX: Gtk, defect)

Description

[Avik Sengupta]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040615 Firefox/0.9
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040615 Firefox/0.9

Navigating to airsahara.indiatimes.com causes Firefox 0.9 (release) to SEGFAULT.
This is a regression since versions upto 0.8 (release) displayed the page properly. 

Reproducible: Always
Steps to Reproduce:
1.Navigate to airsahara.indiatimes.com


Actual Results:  
Firefox SEGFAULT's with message

Segmentation fault      "$prog" ${1+"$@"}

Expected Results:  
Display the page. 

Using gtk+xft from ftp.mozilla.org

Comment 1

[Avik Sengupta]

Attachment: Stacktrace generated from core

Comment 2

[Avik Sengupta]

the previously mentioned page is down today (06/16), but try
http://indianairlines.indiatimes.com which shows the same behaviour -- Crash!

Comment 3

[Avik Sengupta]

Another site that crashes on its homepage is http://www.alwayson-network.com .
Checked with Firefox 0.9.1 , bug still exists. Talkback sent. 

Comment 4

[Adam Hauner]

Report I was found by URL search:

TB197027:
GetNormalLineHeight() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsHTMLReflowState.cpp,
line 2124]
ComputeLineHeight() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsHTMLReflowState.cpp,
line 704]
nsHTMLReflowState::CalcLineHeight() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsHTMLReflowState.cpp,
line 2191]
nsBlockReflowState::nsBlockReflowState() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockReflowState.cpp,
line 165]
nsBlockFrame::Reflow() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 686]
nsBlockReflowContext::ReflowBlock() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockReflowContext.cpp,
line 189]
nsBlockFrame::ReflowBlockFrame() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 95]
nsBlockFrame::ReflowLine() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 2311]
nsBlockFrame::ReflowDirtyLines() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 2096]
nsBlockFrame::Reflow() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 816]
nsContainerFrame::ReflowChild() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 982]
...
bug 240757 and bug 246825 are related
-> Style System

TB190876:
nsTextFrame::TextStyle::TextStyle()
nsTextFrame::Reflow() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsTextFrame.cpp,
line 5222]
nsLineLayout::ReflowFrame() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsLineLayout.cpp,
line 997]
nsBlockFrame::ReflowInlineFrame() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 3571]
nsBlockFrame::DoReflowInlineFrames() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 3429]
nsBlockFrame::DoReflowInlineFramesAuto() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 3332]
nsBlockFrame::ReflowInlineFrames() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 3273]
nsBlockFrame::ReflowLine() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 2440]
nsBlockFrame::ReflowDirtyLines() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 2096]
nsBlockFrame::Reflow() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsBlockFrame.cpp,
line 816]
nsContainerFrame::ReflowChild() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 982]
nsTableCellFrame::Reflow() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/table/src/nsTableCellFrame.cpp,
line 439]
nsContainerFrame::ReflowChild() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 982]
nsTableRowFrame::ReflowChildren() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/table/src/nsTableRowFrame.cpp,
line 962]
nsTableRowFrame::Reflow() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/table/src/nsTableRowFrame.cpp,
line 1397]
nsContainerFrame::ReflowChild() 
[/builds/tinderbox/firefox-0.9.1/Linux_2.4.20-28.8_Clobber/mozilla/layout/html/base/src/nsContainerFrame.cpp,
line 982]
...

Comment 5

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

This is generally the crash that happens when the platform GFX code returns a
null font metrics pointer.

Comment 6

[Boris Zbarsky [:bzbarsky]]

Probably the same as bug 180309.

Comment 7

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

*** This bug has been marked as a duplicate of 180309 ***