460743 - crash [@ gfxMixedFontFamily::ReplaceFontEntry(gfxFontEntry*, gfxFontEntry*)]

Status: RESOLVED DUPLICATE of bug 460037

(Core :: Graphics, defect, P2)

Description

[(mostly gone) XtC4UaLL [:xtc4uall]]

Signature	gfxMixedFontFamily::ReplaceFontEntry(gfxFontEntry*, gfxFontEntry*)
UUID	d3c059fa-9dcc-11dd-8a24-001a4bd43e5c
Time	2008-10-19 03:56:29-07
Uptime	4951
Product	Firefox
Version	3.1b2pre
Build ID	20081018033524
OS	Windows NT
OS Version	5.1.2600 Service Pack 3
CPU	x86
CPU Info	GenuineIntel family 15 model 2 stepping 9
Crash Reason	EXCEPTION_ACCESS_VIOLATION
Crash Address	0x78
Frame 	Module 	Signature 	Source
0 	xul.dll 	gfxMixedFontFamily::ReplaceFontEntry(gfxFontEntry*,gfxFontEntry*) 	obj-firefox/dist/include/thebes/gfxUserFontSet.h:115
1 	xul.dll 	gfxUserFontSet::OnLoadComplete(gfxFontEntry*,gfxDownloadedFontData const&,unsigned int) 	gfx/thebes/src/gfxUserFontSet.cpp:227
2 	xul.dll 	nsCOMPtr_base::assign_with_AddRef(nsISupports*) 	obj-firefox/xpcom/build/nsCOMPtr.cpp:89
3 	xul.dll 	nsFontFaceLoader::OnDownloadComplete(nsIDownloader*,nsIRequest*,nsISupports*,unsigned int,nsIFile*) 	layout/style/nsFontFaceLoader.cpp:204

bp-d3c059fa-9dcc-11dd-8a24-001a4bd43e5c (Minefield/3.1b2pre ID:20081018033524)
bp-a783cb61-9e97-11dd-b8fd-001cc45a2ce4 (Minefield/3.1b2pre ID:20081019033640)

the crash seems to happen if you visit http://m8y.org/tmp/testcase63.xhtml (mentioned in https://bugzilla.mozilla.org/show_bug.cgi?id=70132#c168), close the tab and just wait resp. go on with surfing other sites; so the crash happens delayed and not immediately just by loading the site.

triggering the crash is independent if you let the font being downloaded or if you install it manually from http://code2000.net/CODE2000.ZIP.

Comment 1

[John Daggett (:jtd)]

I suspect this may be bug 460037 but I'll confirm that.

Comment 2

[John Daggett (:jtd)]

Tested with fix for bug 460037.  Once that is checked in, reopen this if you still experience the problem.