455773 - Crash in [@ GetWordFontOrGroup ]

Status: RESOLVED WORKSFORME

(Core :: Layout: Text and Fonts, defect, critical)

Description

[Marcia Knous [:marcia - needinfo? me/PTO 12/6-12/12)]]]

Seen while running Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b1pre) Gecko/20080917034815 Minefield/3.1b1pre.

I am not sure yet how to reproduce. I was trying to reproduce Bug 455646 and hit this. I had the NoScript extension installed and several tabs open with youtube.com.

Comment 1

[Marcia Knous [:marcia - needinfo? me/PTO 12/6-12/12)]]]

Breakpad report: http://crash-stats.mozilla.com/report/index/7f6418c2-84f1-11dd-b378-001a4bd43e5c

Comment 2

[Jesse Ruderman]

The stack trace blames TextRunWordCache, so this is more likely to be a bug there than in the JIT.  Unless the JIT scribbled over memory or something.

Comment 3

[Robert O'Callahan (:roc) (email my personal email if necessary)]

You only hit this once, Marcia?

Comment 4

[Marcia Knous [:marcia - needinfo? me/PTO 12/6-12/12)]]]

So far, yes, but I am keeping an eye out and will try to get you a better set of STR.

(In reply to comment #3)
> You only hit this once, Marcia?

Comment 5

[chris hofmann]

a really small number of people hit this crash each day


9 total crashes for GetWordFontOrGroup on 20090819-crashdata.csv
1 start up crashes inside 3 minutes

os breakdown
   4 GetWordFontOrGroup Windows NT 5.1.2600 Service Pack 2
   2 GetWordFontOrGroup Windows NT 6.0.6000
   2 GetWordFontOrGroup Windows NT 5.1.2600 Service Pack 3
   1 GetWordFontOrGroup Windows NT 6.0.6001 Service Pack 1

distribution of versions where the crash was found on 20090819-crashdata.csv
   6 Firefox 3.5.2
   3 Firefox 3.0.13

Comment 6

[Marcia Knous [:marcia - needinfo? me/PTO 12/6-12/12)]]]

I just hit this crash this morning - http://crash-stats.mozilla.com/report/index/bp-8d91bd1c-fe2b-4080-8b2a-bfe042091221 is my stack trace.

Comment 7

[chris hofmann]

still going at about 1-5 crashes per day.   we had a peak day on 12/17 where we had 10 crashes

all releases
   1 3.5.5
   8 3.5.6
   1 3.6b1

os breakdown
   5 @0x0 | GetWordFontOrGroup Windows NT 5.1.2600 Service Pack 3
   3 GetWordFontOrGroup Windows NT 5.1.2600 Service Pack 3
   2 GetWordFontOrGroup Windows NT 5.1.2600 Service Pack 2

Comment 8

[John Daggett (:jtd)]

I'm pretty sure this is another variation of bug 527280.

Comment 9

[Robert Kaiser]

bp-baa9fbed-c48e-491c-acc9-5f2242120304 is a current example of this on 11, https://crash-stats.mozilla.com/report/list?range_value=4&range_unit=weeks&signature=GetWordFontOrGroup has more. Low volume, but still around.

Comment 10

[Mats Palmgren (:mats)]

There are no crashes after FF10.0.2 for this signature.
It appears we no longer have a function with this name.
http://mxr.mozilla.org/mozilla-central/search?string=GetWordFontOrGroup