Closed Bug 379866 Opened 17 years ago Closed 17 years ago

Chinese unicode font causes crash with IPA characters [@ ReadCMAPTableFormat12]

Categories

(Core Graveyard :: GFX: Win32, defect)

1.8 Branch
x86
Windows XP
defect
Not set
critical

Tracking

(Not tracked)

RESOLVED DUPLICATE of bug 334833

People

(Reporter: kjoonlee, Unassigned)

References

()

Details

(Keywords: crash)

Crash Data

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.4) Gecko/20070501 Firefox/2.0.0.4
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.4) Gecko/20070501 Firefox/2.0.0.4

"AR PL ZenKai Uni" Chinese Unicode TrueType font Kaiti style (ukai.ttf)

is downloadable from:

http://packages.debian.org/ttf-arphic-ukai

ukai.ttf will cause crashes in Firefox when you try to use the esh character, ʃ (&#643), even if you're using another font.

Firefox 2.x either freezes or crashes when you try to display the esh, or when you try to copy-and-paste it into any address bar / search bar / search form.

Removing ukai.ttf solves the problem.

BTW, Minefield 3.0a4pre (Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a4pre) Gecko/20070427 Minefield/3.0a4pre) doesn't crash in the same circumstances.

Reproducible: Always

Steps to Reproduce:
1. Install ukai.ttf
2. display / input esh
Actual Results:  
crash (usual) or freeze (first couple of times)

Expected Results:  
normal display of esh

crash ID: TB31850594Y
crash ID: TB31851132W
Oops, the crash IDs are for 2.0.0.3, not 2.0.0.4 rc 1.
Version: unspecified → 2.0 Branch
Dupe of Bug 334833?
Assignee: nobody → win32
Component: General → GFX: Win32
Product: Firefox → Core
QA Contact: general → ian
Whiteboard: DUPEME
Version: 2.0 Branch → 1.8 Branch
Yeah, I agree that this is a dupe.

Incident ID: 31850594
Stack Signature	ReadCMAPTableFormat12 b5df9c44
Product ID	Firefox2
Build ID	2007030919
Trigger Time	2007-05-06 01:02:40.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	firefox.exe + (00129e66)
URL visited	http://en.wikipedia.org/wiki/IPA
User Comments	
Since Last Crash	1536 sec
Total Uptime	915648 sec
Trigger Reason	Access violation
Source File, Line No.	c:/builds/tinderbox/Fx-Mozilla1.8-release/WINNT_5.2_Depend/mozilla/gfx/src/windows/nsFontMetricsWin.cpp, line 1618
Stack Trace 	
ReadCMAPTableFormat12  [mozilla/gfx/src/windows/nsFontMetricsWin.cpp, line 1618]
nsFontMetricsWin::GetFontCCMAP  [mozilla/gfx/src/windows/nsFontMetricsWin.cpp, line 1787]
nsFontMetricsWin::GetCCMAP  [mozilla/gfx/src/windows/nsFontMetricsWin.cpp, line 1913]
nsFontMetricsWin::FindGlobalFont  [mozilla/gfx/src/windows/nsFontMetricsWin.cpp, line 2807]
nsFontMetricsWin::FindFont  [mozilla/gfx/src/windows/nsFontMetricsWin.cpp, line 3631]
nsFontMetricsWin::ResolveForwards  [mozilla/gfx/src/windows/nsFontMetricsWin.cpp, line 4093]
nsRenderingContextWin::GetTextDimensionsInternal  [mozilla/gfx/src/windows/nsRenderingContextWin.cpp, line 1990]
nsRenderingContextImpl::GetTextDimensions  [mozilla/gfx/src/shared/nsRenderingContextImpl.cpp, line 735]
nsTextFrame::MeasureText  [mozilla/layout/generic/nsTextFrame.cpp, line 5534]
nsTextFrame::Reflow  [mozilla/layout/generic/nsTextFrame.cpp, line 6008]
nsLineLayout::ReflowFrame  [mozilla/layout/generic/nsLineLayout.cpp, line 996]
nsInlineFrame::ReflowInlineFrame  [mozilla/layout/generic/nsInlineFrame.cpp, line 689]
nsInlineFrame::ReflowFrames  [mozilla/layout/generic/nsInlineFrame.cpp, line 519]
nsInlineFrame::Reflow  [mozilla/layout/generic/nsInlineFrame.cpp, line 433]
nsLineLayout::ReflowFrame  [mozilla/layout/generic/nsLineLayout.cpp, line 996]
nsInlineFrame::ReflowInlineFrame  [mozilla/layout/generic/nsInlineFrame.cpp, line 689]
nsInlineFrame::ReflowFrames  [mozilla/layout/generic/nsInlineFrame.cpp, line 519]
nsInlineFrame::Reflow  [mozilla/layout/generic/nsInlineFrame.cpp, line 433]
nsLineLayout::ReflowFrame  [mozilla/layout/generic/nsLineLayout.cpp, line 996]
nsBlockFrame::ReflowInlineFrame  [mozilla/layout/generic/nsBlockFrame.cpp, line 4245]
nsBlockFrame::DoReflowInlineFrames  [mozilla/layout/generic/nsBlockFrame.cpp, line 3898]
nsBlockFrame::ReflowInlineFrames  [mozilla/layout/generic/nsBlockFrame.cpp, line 3779]
nsBlockFrame::ReflowLine  [mozilla/layout/generic/nsBlockFrame.cpp, line 2772]
nsBlockFrame::ReflowDirtyLines  [mozilla/layout/generic/nsBlockFrame.cpp, line 2302]
nsBlockFrame::Reflow  [mozilla/layout/generic/nsBlockFrame.cpp, line 905]
nsBlockReflowContext::ReflowBlock  [mozilla/layout/generic/nsBlockReflowContext.cpp, line 606]
nsBlockFrame::ReflowBlockFrame  [mozilla/layout/generic/nsBlockFrame.cpp, line 3492]
nsBlockFrame::ReflowLine  [mozilla/layout/generic/nsBlockFrame.cpp, line 2651]
nsBlockFrame::ReflowDirtyLines  [mozilla/layout/generic/nsBlockFrame.cpp, line 2302]
nsBlockFrame::Reflow  [mozilla/layout/generic/nsBlockFrame.cpp, line 905]
nsBlockReflowContext::ReflowBlock  [mozilla/layout/generic/nsBlockReflowContext.cpp, line 606]
nsBlockFrame::ReflowBlockFrame  [mozilla/layout/generic/nsBlockFrame.cpp, line 3492]
nsBlockFrame::ReflowLine  [mozilla/layout/generic/nsBlockFrame.cpp, line 2651]
nsBlockFrame::ReflowDirtyLines  [mozilla/layout/generic/nsBlockFrame.cpp, line 2302]
nsBlockFrame::Reflow  [mozilla/layout/generic/nsBlockFrame.cpp, line 905]
nsBlockReflowContext::ReflowBlock  [mozilla/layout/generic/nsBlockReflowContext.cpp, line 606]
nsBlockFrame::ReflowBlockFrame  [mozilla/layout/generic/nsBlockFrame.cpp, line 3492]
nsBlockFrame::ReflowLine  [mozilla/layout/generic/nsBlockFrame.cpp, line 2651]
nsBlockFrame::ReflowDirtyLines  [mozilla/layout/generic/nsBlockFrame.cpp, line 2302]
nsBlockFrame::Reflow  [mozilla/layout/generic/nsBlockFrame.cpp, line 905]
nsBlockReflowContext::ReflowBlock  [mozilla/layout/generic/nsBlockReflowContext.cpp, line 606]
nsBlockFrame::ReflowBlockFrame  [mozilla/layout/generic/nsBlockFrame.cpp, line 3492]
nsBlockFrame::ReflowLine  [mozilla/layout/generic/nsBlockFrame.cpp, line 2651]
nsBlockFrame::ReflowDirtyLines  [mozilla/layout/generic/nsBlockFrame.cpp, line 2302]
nsBlockFrame::Reflow  [mozilla/layout/generic/nsBlockFrame.cpp, line 905]
nsBlockReflowContext::ReflowBlock  [mozilla/layout/generic/nsBlockReflowContext.cpp, line 606]
nsBlockFrame::ReflowFloat  [mozilla/layout/generic/nsBlockFrame.cpp, line 6030]
nsBlockReflowState::FlowAndPlaceFloat  [mozilla/layout/generic/nsBlockReflowState.cpp, line 863]
nsBlockReflowState::AddFloat  [mozilla/layout/generic/nsBlockReflowState.cpp, line 637]
nsLineLayout::ReflowFrame  [mozilla/layout/generic/nsLineLayout.cpp, line 1019]
nsBlockFrame::ReflowInlineFrame  [mozilla/layout/generic/nsBlockFrame.cpp, line 4245]
nsBlockFrame::DoReflowInlineFrames  [mozilla/layout/generic/nsBlockFrame.cpp, line 3898]
nsBlockFrame::ReflowInlineFrames  [mozilla/layout/generic/nsBlockFrame.cpp, line 3779]
nsBlockFrame::ReflowLine  [mozilla/layout/generic/nsBlockFrame.cpp, line 2772]
nsBlockFrame::ReflowDirtyLines  [mozilla/layout/generic/nsBlockFrame.cpp, line 2302]
nsBlockFrame::Reflow  [mozilla/layout/generic/nsBlockFrame.cpp, line 905]
nsBlockReflowContext::ReflowBlock  [mozilla/layout/generic/nsBlockReflowContext.cpp, line 606]
nsBlockFrame::ReflowBlockFrame  [mozilla/layout/generic/nsBlockFrame.cpp, line 3492]
nsBlockFrame::ReflowLine  [mozilla/layout/generic/nsBlockFrame.cpp, line 2651]
nsBlockFrame::ReflowDirtyLines  [mozilla/layout/generic/nsBlockFrame.cpp, line 2302]
nsBlockFrame::Reflow  [mozilla/layout/generic/nsBlockFrame.cpp, line 905]
nsBlockReflowContext::ReflowBlock  [mozilla/layout/generic/nsBlockReflowContext.cpp, line 606]
nsBlockFrame::ReflowBlockFrame  [mozilla/layout/generic/nsBlockFrame.cpp, line 3492]
nsBlockFrame::ReflowLine  [mozilla/layout/generic/nsBlockFrame.cpp, line 2651]
Status: UNCONFIRMED → RESOLVED
Closed: 17 years ago
Keywords: crash
Resolution: --- → DUPLICATE
Summary: Chinese unicode font causes crash with IPA characters → Chinese unicode font causes crash with IPA characters [@ ReadCMAPTableFormat12]
Whiteboard: DUPEME
Product: Core → Core Graveyard
Crash Signature: [@ ReadCMAPTableFormat12]
You need to log in before you can comment on or make changes to this bug.