377522 - crash [@ GetAdjustedSpacing] / ASSERTION: Ligature continuation at start of spacing run?: 'i > aStart', file gfxFont.cpp, line 810

Status: RESOLVED WORKSFORME

(Core :: Graphics, defect)

Description

[Mats Palmgren (inactive)]

crash [@ GetAdjustedSpacing]
ASSERTION: Ligature continuation at start of spacing run?: 'i > aStart', file gfxFont.cpp, line 810

STEPS TO REPRODUCE
1. load testcase

PLATFORMS AND BUILDS TESTED
Minimal testcase crashes local Firefox trunk debug build on Linux (x86_64)

Minimal testcase does NOT crash Firefox 20070414 nightly (32-bit)
on the same host.  A non-reduced testcase does crash though.

Bug does NOT occur in Firefox 2.0.0.3 on Linux

Comment 1

[Mats Palmgren (inactive)]

Attachment: Minimal testcase (crash on load)

Comment 2

[Mats Palmgren (inactive)]

Attachment: stack

When the assertion occurs we will write before the buffer start.

Comment 3

[Mats Palmgren (inactive)]

fwiw, the Firefox nightly trunk crash on the non-minimal testcase here:
TB31193215w  (might be a different problem though)

Comment 4

[Karl Tomlinson (:karlt)]

I can't reproduce.  Does it still crash?

Comment 5

[Mats Palmgren (inactive)]

Tested both opt and debug builds - no crash.
No assertions or Glib warnings either. Excellent. Thanks Karl.

-> WORKSFORME

Comment 6

[Mats Palmgren (inactive)]

crashtest:
https://hg.mozilla.org/integration/mozilla-inbound/rev/94457c73da81

Comment 7

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/mozilla-central/rev/94457c73da81