312109 - Firefox segfaults on startup when no local fonts are installed [@ GetNormalLineHeight]

Status: RESOLVED DUPLICATE of bug 180309

(Core :: Layout: Text and Fonts, defect)

Description

[Joerg Sonneberger]

User-Agent:       Mozilla/5.0 (X11; U; NetBSD i386; en-US; rv:1.7.12) Gecko/20051003 Firefox/1.0.7
Build Identifier: Mozilla/5.0 (X11; U; NetBSD i386; en-US; rv:1.7.12) Gecko/20051003 Firefox/1.0.7

When Firefox is started, but no fonts are installed *locally*, it segfaults with
a NULL pointer derefence in GetNormalLineHeight or similiar places. This is
independent from the existance of fonts in the X server.

Reproducible: Always

Steps to Reproduce:
1. Connect to machine with firefox, but no fonts installed
2. set DISPLAY
3. run firefox

Actual Results:  
It coredumps.

Expected Results:  
(a) it should just use the fonts from the X11 server.
(b) it might bail out and complain about unable to use Xft.

libgklayout.so

Comment 1

[Adam Guthrie]

Could you get a stacktrace from the crash with gbd?

Comment 2

[Joerg Sonneberger]

Tell me, if you need more.

#0  0x2910b260 in GetNormalLineHeight (aFontMetrics=0x0) at
nsHTMLReflowState.cpp:2124
#1  0x2910b446 in ComputeLineHeight (aPresContext=0x83f2e00,
aRenderingContext=0x8484600, aStyleContext=0x130) at nsHTMLReflowState.cpp:2176
#2  0x2910b4ef in nsHTMLReflowState::CalcLineHeight (aPresContext=0x83f2e00,
aRenderingContext=0x8484600, aFrame=0xbfbfda24) at nsHTMLReflowState.cpp:2191
#3  0x290ef8db in nsBlockReflowState (this=0xbfbfdbd0, aReflowState=@0xbfbfdeb0,
aPresContext=0x83f2e00, aFrame=0x847e208, aMetrics=@0xbfbfdf70,
aBlockMarginRoot=4194304) at nsBlockReflowState.cpp:165
#4  0x290e6016 in nsBlockFrame::Reflow (this=0x847e208, aPresContext=0x83f2e00,
aMetrics=@0xbfbfdf70, aReflowState=@0xbfbfdeb0, aStatus=@0xbfbfe1ac) at
nsBlockFrame.cpp:680
#5  0x290f5671 in nsContainerFrame::ReflowChild (this=0x843e4d8,
aKidFrame=0x847e208, aPresContext=0x83f2e00, aDesiredSize=@0xbfbfdf70,
aReflowState=@0xbfbfdeb0, aX=0, aY=0, aFlags=0, aStatus=@0xbfbfe1ac)
    at nsContainerFrame.cpp:966
#6  0x29107ba0 in CanvasFrame::Reflow (this=0x843e4d8, aPresContext=0x83f2e00,
aDesiredSize=@0xbfbfe1c0, aReflowState=@0xbfbfe060, aStatus=@0xbfbfe1ac) at
nsHTMLFrame.cpp:550
#7  0x291d6e8e in nsBoxToBlockAdaptor::Reflow () from
/usr/pkg/lib/firefox/components/libgklayout.so
#8  0x291d6a89 in nsBoxToBlockAdaptor::DoLayout () from
/usr/pkg/lib/firefox/components/libgklayout.so
#9  0x291cea20 in nsBox::Layout () from
/usr/pkg/lib/firefox/components/libgklayout.so
#10 0x291cb08b in nsScrollBoxFrame::DoLayout () from
/usr/pkg/lib/firefox/components/libgklayout.so
#11 0x291cea20 in nsBox::Layout () from
/usr/pkg/lib/firefox/components/libgklayout.so
#12 0x291d897c in nsContainerBox::LayoutChildAt () from
/usr/pkg/lib/firefox/components/libgklayout.so
#13 0x29104f89 in nsGfxScrollFrameInner::LayoutBox (this=0x84565c0,
aState=@0xbfbfe650, aBox=0x843e738, aRect=@0xbfbfe510) at nsGfxScrollFrame.cpp:1264
#14 0x291051f8 in nsGfxScrollFrameInner::Layout (this=0x84565c0,
aState=@0xbfbfe650) at nsGfxScrollFrame.cpp:1417
#15 0x29104fd3 in nsGfxScrollFrame::DoLayout (this=0x843e5fc,
aState=@0xbfbfe650) at nsGfxScrollFrame.cpp:1272
#16 0x291cea20 in nsBox::Layout () from
/usr/pkg/lib/firefox/components/libgklayout.so
#17 0x291d2424 in nsBoxFrame::Reflow () from
/usr/pkg/lib/firefox/components/libgklayout.so
#18 0x291043da in nsGfxScrollFrame::Reflow (this=0x843e5fc,
aPresContext=0x83f2e00, aDesiredSize=@0xbfbfe860, aReflowState=@0xbfbfe790,
aStatus=@0xbfbfe924) at nsGfxScrollFrame.cpp:870
#19 0x290f5671 in nsContainerFrame::ReflowChild (this=0x843e3e0,
aKidFrame=0x843e5fc, aPresContext=0x83f2e00, aDesiredSize=@0xbfbfe860,
aReflowState=@0xbfbfe790, aX=0, aY=0, aFlags=0, aStatus=@0xbfbfe924)
    at nsContainerFrame.cpp:966
#20 0x29151649 in ViewportFrame::Reflow (this=0x843e3e0, aPresContext=0x83f2e00,
aDesiredSize=@0xbfbfea00, aReflowState=@0xbfbfe940, aStatus=@0xbfbfe924) at
nsViewportFrame.cpp:247
#21 0x29132c7f in PresShell::InitialReflow (this=0x843d000, aWidth=-1077945820,
aHeight=-1077945820) at nsPresShell.cpp:2803
#22 0x29228168 in nsContentSink::StartLayout () from
/usr/pkg/lib/firefox/components/libgklayout.so
#23 0x2934e88f in HTMLContentSink::StartLayout () from
/usr/pkg/lib/firefox/components/libgklayout.so
#24 0x2934cd45 in HTMLContentSink::OpenBody () from
/usr/pkg/lib/firefox/components/libgklayout.so
#25 0x29735972 in CNavDTD::OpenBody () from
/usr/pkg/lib/firefox/components/libhtmlpars.so
#26 0x29735c94 in CNavDTD::OpenContainer () from
/usr/pkg/lib/firefox/components/libhtmlpars.so
#27 0x29732add in CNavDTD::HandleDefaultStartToken () from
/usr/pkg/lib/firefox/components/libhtmlpars.so
#28 0x29733743 in CNavDTD::HandleStartToken () from
/usr/pkg/lib/firefox/components/libhtmlpars.so
#29 0x297320d9 in CNavDTD::BuildNeglectedTarget () from
/usr/pkg/lib/firefox/components/libhtmlpars.so
#30 0x297313e7 in CNavDTD::~CNavDTD () from
/usr/pkg/lib/firefox/components/libhtmlpars.so
#31 0x29747e74 in nsParser::ResumeParse () from
/usr/pkg/lib/firefox/components/libhtmlpars.so
#32 0x29747b79 in nsParser::ResumeParse () from
/usr/pkg/lib/firefox/components/libhtmlpars.so
#33 0x297492c0 in nsParser::DetectMetaTag () from
/usr/pkg/lib/firefox/components/libhtmlpars.so
#34 0x28f07d54 in nsDocumentOpenInfo::Open () from
/usr/pkg/lib/firefox/components/libdocshell.so
#35 0x28ceacb7 in nsFileChannel::EnsureStream () from
/usr/pkg/lib/firefox/components/libnecko.so

Comment 3

[Adam Guthrie]

*** This bug has been marked as a duplicate of 180309 ***

Comment 4

[Adam Guthrie]

Now that I look at the bug I duped this as, it was checked into the aviary
branch. So, could you test this on trunk and see if it's still an issue? If so,
you can reopen.
http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-trunk/ FWIW, there
are not crashes with this stacktrace on talkback in the 1.5 branch or trunk.