416599 - Crash with combination of Thai characters [@ SimpleBreak]

Status: RESOLVED DUPLICATE of bug 416721

(Core :: Internationalization, defect)

Description

[Alistair Vining]

Attachment: Minimal test case

As pointed out (rather too cheerfully) at http://blogs.msdn.com/michkap/archive/2008/02/09/7566284.aspx , the above URL crashes Firefox 3 betas.

I have a fairly minimal testcase which involves deleting all the web page apart from a large amount of what I think is Thai; deleting more characters from the front causes crashes that bypass the Crash Reporter tool, deleting characters from the end causes it to not crash.

Two crash reports, the first from the crash URL above, the second from the minimized testcase:
http://crash-stats.mozilla.com/report/index/45f9cd35-d757-11dc-a264-001a4bd43e5c
http://crash-stats.mozilla.com/report/index/1a308e11-d75f-11dc-9654-001a4bd43ef6

Build ID: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9b4pre) Gecko/2008020904 Minefield/3.0b4pre

Comment 1

[timeless]

Firefox 3.0b4pre Crash Report
ID: 45f9cd35-d757-11dc-a264-001a4bd43e5c
Signature	SimpleBreak(unsigned short const*, int, tag_SCRIPT_ANALYSIS const*, tag_SCRIPT_LOGATTR*)
Frame 	Signature 	Source
0 	SimpleBreak(unsigned short const*, int, tag_SCRIPT_ANALYSIS const*, tag_SCRIPT_LOGATTR*) 	
1 	ScriptBreak 	
2 	NS_GetComplexLineBreaks(unsigned short const*, unsigned int, unsigned char*) 	mozilla/intl/lwbrk/src/nsUniscribeBreaker.cpp:80
3 	@0x40d0d03 	

Comment 2

[Simon Montagu :smontagu]

Forward duping to bug 416721, which has a patch.