418382 - crash [@ UniscribeItem::SaveGlyphs(gfxTextRun*)]

Status: RESOLVED WORKSFORME

(Core :: Graphics, defect, P2)

Description

[Samuel Sidler (old account; do not CC)]

Firefox 3 beta 3 has a new topcrash. This still occurs on the trunk and appears
to be Windows-only.

See also: bp-ec169991-ded7-11dc-9d95-001a4bd43ef6

Crashing Thread
Frame 	Signature 	Source
0 	UniscribeItem::SaveGlyphs(gfxTextRun*) 	mozilla/gfx/thebes/src/gfxWindowsFonts.cpp:1104
1 	gfxWindowsFontGroup::InitTextRunUniscribe(gfxContext*, gfxTextRun*, unsigned short const*, unsigned int) 	mozilla/gfx/thebes/src/gfxWindowsFonts.cpp:1710
2 	gfxWindowsFontGroup::MakeTextRun(unsigned char const*, unsigned int, gfxTextRunFactory::Parameters const*, unsigned int) 	mozilla/gfx/thebes/src/gfxWindowsFonts.cpp:607
3 	gfxTextRun::SetSpaceGlyph(gfxFont*, gfxContext*, unsigned int) 	mozilla/gfx/thebes/src/gfxFont.cpp:1924
4 	gfxFontGroup::MakeSpaceTextRun(gfxTextRunFactory::Parameters const*, unsigned int) 	mozilla/gfx/thebes/src/gfxFont.cpp:881
5 	MakeTextRun 	mozilla/layout/generic/nsTextFrameThebes.cpp:408
6 	BuildTextRunsScanner::BuildTextRunForFrames(void*) 	mozilla/layout/generic/nsTextFrameThebes.cpp:1616
7 	BuildTextRunsScanner::FlushFrames(int, int) 	mozilla/layout/generic/nsTextFrameThebes.cpp:1053
8 	BuildTextRunsScanner::ScanFrame(nsIFrame*) 	mozilla/layout/generic/nsTextFrameThebes.cpp:1219
9 	BuildTextRuns 	mozilla/layout/generic/nsTextFrameThebes.cpp:970
10 	nsTextFrame::EnsureTextRun(gfxContext*, nsIFrame*, nsLineList_iterator const*, unsigned int*) 	mozilla/layout/generic/nsTextFrameThebes.cpp:1786
11 	nsTextFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) 	mozilla/layout/generic/nsTextFrameThebes.cpp:5306
12 	nsLineLayout::ReflowFrame(nsIFrame*, unsigned int&, nsHTMLReflowMetrics*, int&) 	mozilla/layout/generic/nsLineLayout.cpp:856
13 	nsBlockFrame::ReflowInlineFrame(nsBlockReflowState&, nsLineLayout&, nsLineList_iterator, nsIFrame*, LineReflowStatus*) 	mozilla/layout/generic/nsBlockFrame.cpp:3607
14 	nsBlockFrame::DoReflowInlineFrames(nsBlockReflowState&, nsLineLayout&, nsLineList_iterator, int*, LineReflowStatus*, int) 	mozilla/layout/generic/nsBlockFrame.cpp:3429
15 	nsBlockFrame::ReflowInlineFrames(nsBlockReflowState&, nsLineList_iterator, int*) 	mozilla/layout/generic/nsBlockFrame.cpp:3278
16 	nsBlockFrame::ReflowLine(nsBlockReflowState&, nsLineList_iterator, int*) 	mozilla/layout/generic/nsBlockFrame.cpp:2335
17 	nsBlockFrame::ReflowDirtyLines(nsBlockReflowState&) 	mozilla/layout/generic/nsBlockFrame.cpp:1897
18 	nsBlockFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) 	mozilla/layout/generic/nsBlockFrame.cpp:936
19 	nsAbsoluteContainingBlock::ReflowAbsoluteFrame(nsIFrame*, nsPresContext*, nsHTMLReflowState const&, int, int, int, nsIFrame*, unsigned int&, nsRect*) 	mozilla/layout/generic/nsAbsoluteContainingBlock.cpp:433
20 	nsAbsoluteContainingBlock::Reflow(nsContainerFrame*, nsPresContext*, nsHTMLReflowState const&, unsigned int&, int, int, int, int, int, nsRect*) 	mozilla/layout/generic/nsAbsoluteContainingBlock.cpp:168
21 	nsBlockFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) 	mozilla/layout/generic/nsBlockFrame.cpp:1163
22 	nsAbsoluteContainingBlock::ReflowAbsoluteFrame(nsIFrame*, nsPresContext*, nsHTMLReflowState const&, int, int, int, nsIFrame*, unsigned int&, nsRect*) 	mozilla/layout/generic/nsAbsoluteContainingBlock.cpp:433
23 	nsAbsoluteContainingBlock::Reflow(nsContainerFrame*, nsPresContext*, nsHTMLReflowState const&, unsigned int&, int, int, int, int, int, nsRect*) 	mozilla/layout/generic/nsAbsoluteContainingBlock.cpp:168
24 	nsBlockFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) 	mozilla/layout/generic/nsBlockFrame.cpp:1163
25 	nsContainerFrame::ReflowChild(nsIFrame*, nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, int, int, unsigned int, unsigned int&, nsOverflowContinuationTracker*) 	mozilla/layout/generic/nsContainerFrame.cpp:755
26 	CanvasFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) 	mozilla/layout/generic/nsHTMLFrame.cpp:584
27 	nsContainerFrame::ReflowChild(nsIFrame*, nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, int, int, unsigned int, unsigned int&, nsOverflowContinuationTracker*) 	mozilla/layout/generic/nsContainerFrame.cpp:755
28 	nsHTMLScrollFrame::ReflowScrolledFrame(ScrollReflowState*, int, int, nsHTMLReflowMetrics*, int) 	mozilla/layout/generic/nsGfxScrollFrame.cpp:485
29 	nsHTMLScrollFrame::ReflowContents(ScrollReflowState*, nsHTMLReflowMetrics const&) 	mozilla/layout/generic/nsGfxScrollFrame.cpp:569
30 	nsHTMLScrollFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) 	mozilla/layout/generic/nsGfxScrollFrame.cpp:770
31 	nsContainerFrame::ReflowChild(nsIFrame*, nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, int, int, unsigned int, unsigned int&, nsOverflowContinuationTracker*) 	mozilla/layout/generic/nsContainerFrame.cpp:755
32 	ViewportFrame::Reflow(nsPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned int&) 	mozilla/layout/generic/nsViewportFrame.cpp:286
33 	PresShell::DoReflow(nsIFrame*) 	mozilla/layout/base/nsPresShell.cpp:6197
34 	PresShell::ProcessReflowCommands(int) 	mozilla/layout/base/nsPresShell.cpp:6302
35 	PresShell::DoFlushPendingNotifications(mozFlushType, int) 	mozilla/layout/base/nsPresShell.cpp:4510
36 	PresShell::ReflowEvent::Run() 	mozilla/layout/base/nsPresShell.cpp:6064
37 	nsThread::ProcessNextEvent(int, int*) 	mozilla/xpcom/threads/nsThread.cpp:510
38 	NS_ProcessNextEvent_P(nsIThread*, int) 	nsThreadUtils.cpp:227
39 	nsBaseAppShell::Run() 	mozilla/widget/src/xpwidgets/nsBaseAppShell.cpp:154
40 	nsAppStartup::Run() 	mozilla/toolkit/components/startup/src/nsAppStartup.cpp:181
41 	PR_GetEnv 	
42 	NS_internal_main(int, char**) 	mozilla/browser/app/nsBrowserApp.cpp:158
43 	wmain 	mozilla/toolkit/xre/nsWindowsWMain.cpp:55
44 	__tmainCRTStartup 	crtexe.c:594
45 	BaseThreadInitThunk 	
46 	ntdll.dll@0x3a9bc

Comment 1

[chris hofmann]

have we been able to dig any commments out for this one?

Comment 2

[Karl Tomlinson (:karlt)]

I think this is similar to a crash I'm seeing after uninstalling fonts.

IIRC these crashes were from such a situation:
bp-ebec1bca-c0ed-11dc-9ab3-001a4bd43e5c
bp-b6b2be59-c0ed-11dc-9a29-001a4bd43ed6

This crash certainly was but the stack is different and not helpful:
bp-fce6b80f-e594-11dc-b73d-001a4bd43ef6

If these recent reports show up and have similar stacks it would confirm:
bp-4fb3b080-fb88-11dc-b9fa-001a4bd43e5c
bp-481e6c17-fb88-11dc-a388-001a4bd43e5c

In my case, the crash occurs on restart after uninstalling the fonts, until the user logs out and logs back in.

Comment 3

[Jim Mathies [:jimm]]

I think we can close this out. The crashes clearly aren't in the 3.0 release version.