415352 - Minefield crashes at gfxTextRun::ComputeLigatureData(unsigned int, unsigned int, gfxTextRun::PropertyProvider*) with European Union Expansion Font Update Installed

Status: RESOLVED FIXED

(Core :: Graphics, defect)

Description

[Nikola Kocić]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9b3pre) Gecko/2008020204 Minefield/3.0b3pre
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9b3pre) Gecko/2008020204 Minefield/3.0b3pre

Minefield crashes when trying to open page in attachment. Works with 20080128_0932 crashes with 20080128_1011

Strange thing is that with recent builds it crashes at gfxTextRun::ComputeLigatureData(unsigned int, unsigned int, gfxTextRun::PropertyProvider*)
http://crash-stats.mozilla.com/report/index/73dd0cb0-d19a-11dc-8176-001a4bd43e5c
http://crash-stats.mozilla.com/report/index/970f98ae-d194-11dc-9740-001a4bd43ef6

but with 20080128_1011 at xul.dll@0x572a29

http://crash-stats.mozilla.com/report/index/dfe024ab-d19b-11dc-9850-001a4bd43e5c
http://crash-stats.mozilla.com/report/index/d781f2e8-d19b-11dc-92df-001a4bd46e84

Reproducible: Always

Steps to Reproduce:
1. Open page in attachment (named crashtest)
Actual Results:  
Minefield crashes at gfxTextRun::ComputeLigatureData(unsigned int, unsigned int, gfxTextRun::PropertyProvider*)

Expected Results:  
Minefield displays page

Comment 1

[Nikola Kocić]

Attachment: Page which causes Minefield to crash

Comment 2

[Jesse Ruderman]

No crash for me, Mac trunk debug.

Can you reduce the testcase some more?  http://www.squarefree.com/2007/09/15/introducing-lithium-a-testcase-reduction-tool/ might be able to help.

Comment 3

[Nikola Kocić]

Attachment: Reduced Crashtest Page

Comment 4

[Jesse Ruderman]

Thanks!

Comment 5

[Jesse Ruderman]

̣ = U+0323 = "Combining dot below".  Not too surprising that a combining character near a font boundary would cause issues.

Comment 6

[Peter van der Woude [:Peter6]]

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9b3pre) Gecko/2008020301 Minefield/3.0b3pre ID:2008020301

WFM, no crash on either URL or testcases

Comment 7

[Nikola Kocić]

I can't figure out why is this crash occurring for only a few users. I tried uninstalling Graphic Card, Mouse and Keyboard Drivers, AV, Firewall, changing Windows Regional Settings, making new Windows and Minefield profiles, turning off all background programs and non-MS services and still I get crash every time. It's very annoying for me because I can't view forum page on which that user has posted (and I don't know on which pages he did)... I must use Opera in that case.

Regressionwindow:
http://bonsai.mozilla.org/cvsquery.cgi?module=PhoenixTinderbox&date=explicit&mindate=1201541520&maxdate=1201543859

My bet is on Bug 410728

Should I set this bug to blocking1.9? for it to get more attention?

Comment 8

[Peter van der Woude [:Peter6]]

maybe it's the font(s) you use ?

Comment 9

[Nikola Kocić]

Peter, you're genius! I downloaded Verdana font, deleted old one (which was 182KB), installed new one (52KB) and it works now. I don't know why is size different as I didn't change fonts (only added 4 new). Still I find it strange that it works normally with builds before 20080128_1011...

Comment 10

[Peter van der Woude [:Peter6]]

(In reply to comment #9)
> Peter, you're genius! I downloaded Verdana font, deleted old one (which was
> 182KB), installed new one (52KB) and it works now. I don't know why is size
> different as I didn't change fonts (only added 4 new). Still I find it strange
> that it works normally with builds before 20080128_1011...
> 
You're welcome.

I'm not sure this bug should be resolved though, you're probably not the only one with this old fontfile

Comment 11

[Nikola Kocić]

I found culprit for this problem - European Union Expansion Font Update:
http://www.microsoft.com/downloads/details.aspx?familyid=0EC6F335-C3DE-44C5-A13D-A1E7CEA5DDEA&displaylang=en

I'll add attachments with non-EU and EU Verdana font.

Comment 12

[Nikola Kocić]

Attachment: Verdana font after European Union Expansion Font Update

Comment 13

[Nikola Kocić]

Attachment: Verdana font before European Union Expansion Font Update

Comment 14

[Karl Tomlinson (:karlt)]

Probably the same bug as bug 423270, but the stacks are slightly different.
Bug 423270 is blocking1.9+.

Comment 16

[Jesse Ruderman]

Nikola, does this still crash for you now that bug 423270 is fixed?  You can grab a nightly build containing that patch from https://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-trunk/.

Comment 17

[Nikola Kocić]

Nope, it doesn't crash anymore for me.