crash on misformatted <font> tag [@ nsThebesFontMetrics::GetMaxAscent]

RESOLVED WORKSFORME

Status

()

Core
Graphics
--
critical
RESOLVED WORKSFORME
12 years ago
12 years ago

People

(Reporter: Peter6, Unassigned)

Tracking

({testcase})

Trunk
x86
Windows 2000
testcase
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Reporter)

Description

12 years ago
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9a1) Gecko/20060512 Minefield/3.0a1 ID:2006051300 [cairo]

repro:
1.open tescase

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
<title>test</title>
</head>
<body>

<font face="'sans-serif">
test
</font>

</body>
</html>

Note the face= has an extra '

Does not crash non-cairo builds

Incident ID: 18635285
Stack Signature	nsThebesFontMetrics::GetMaxAscent b0a44e4c
Product ID	FirefoxTrunk
Build ID	2006051208
Trigger Time	2006-05-13 02:48:56.0
Platform	Win32
Operating System	Windows NT 5.0 build 2195
Module	firefox.exe + (000d5aa0)
URL visited	
User Comments	
Since Last Crash	44 sec
Total Uptime	16992 sec
Trigger Reason	Access violation
Source File, Line No.	c:\builds\tinderbox\fx-trunk-cairo\winnt_5.2_depend\mozilla\gfx\src\thebes\nsthebesfontmetrics.cpp, line 213
Stack Trace 	
nsThebesFontMetrics::GetMaxAscent   nsTextStyle::nsTextStyle   nsTextFrame::Reflow   0x02a07f48
0x0012ea0c
0x029a9e80
0x029a9dfc
0x029a97d8
0x02a55ec8
0x02a17b6c
0x02a17cac
(Reporter)

Comment 1

12 years ago
Created attachment 221890 [details]
tescase
The testcase doesn't crash for me on 2006-06-13 trunk build (cairo). Marking worksforme?
Severity: normal → critical
(Reporter)

Comment 3

12 years ago
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9a1) Gecko/20060613 Minefield/3.0a1 ID:2006061321 [cairo]

WFM
Status: NEW → RESOLVED
Last Resolved: 12 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.