463910 - Crash [@ ATS@0x79bc8] [@ gfxAtsuiFontGroup::InitTextRun]

Status: RESOLVED DUPLICATE of bug 436663

(Core :: Graphics, defect)

Description

[Gideon]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.3) Gecko/2008092417 Firefox/3.0.3
Build Identifier: Firefox/3.0.3

A short way to get to the URL is to use snipurl.com/58xnh
This does not crash windows FF, or Mac Safari, but,I've verified
with someone else, it always crashes the Mac FF. I have no way
of figuring out how to classify this one for Bugzilla, but I suspect
that that's easy for a pro. Please process. The URL involved is
a two year old item from Israel's biggest (Hebrew) newspaper.

Reproducible: Always

Steps to Reproduce:
1.Just try to go there, and you'll see the crash.
2.
3.
Actual Results:  
FF crashes

Expected Results:  
It crashes.

Should have showed the webpage, just as Safari would on the Mac,
or any Windows browser in Windows.
Obviously, I have no idea of how serious this is, as I haven't a clue
what's actually happening. It might well be something serious,
but I'll call it "normal". Please check.

Comment 1

[Gideon]

I should have mentioned, I have only two addons,
Noscript and AdblockPlus, but both were disabled
and the phenomenon still occurred, same way,
instantly.

Comment 2

[Stefan [:stefanh]]

(crashes are always critical)

Comment 3

[Stefan [:stefanh]]

That said, http://www.ynet.co.il/Ext/Comp/ArticleLayout/CdaArticlePrintPreview/1,2506,L-3309896,00.html doesn't crash for me with 3.0.3/latest trunk (OS X 10.5.5).

Comment 4

[Mats Palmgren (inactive)]

bp-10a0f53e-1206-4966-bccb-aaed20081111

ATS@0x79bc8	
ATS@0x2c1d1	
ATS@0x2bc6e	
ATS@0x1cd3a	
ATS@0x2918e	
ATS@0x1c10e	
ATS@0x1bfc2	
QD@0x1e365	
QD@0x1e251	
QD@0x2f3a9	
QD@0x39e98	
QD@0x39dc9	
gfxAtsuiFontGroup::InitTextRun	mozilla/gfx/thebes/src/gfxAtsuiFonts.cpp:1617
gfxAtsuiFontGroup::MakeTextRun	mozilla/gfx/thebes/src/gfxAtsuiFonts.cpp:702
TextRunWordCache::MakeTextRun	mozilla/gfx/thebes/src/gfxTextRunWordCache.cpp:532
gfxTextRunWordCache::MakeTextRun	mozilla/gfx/thebes/src/gfxTextRunWordCache.cpp:785
BuildTextRunsScanner::BuildTextRunForFrames	mozilla/layout/generic/nsTextFrameThebes.cpp:390
BuildTextRunsScanner::FlushFrames	mozilla/layout/generic/nsTextFrameThebes.cpp:1050
nsTextFrame::EnsureTextRun	mozilla/layout/generic/nsTextFrameThebes.cpp:989
nsTextFrame::AddInlineMinWidthForFlow	mozilla/layout/generic/nsTextFrameThebes.cpp:4996 
...

Comment 5

[Smokey Ardisson (offline for a while; not following bugs - do not email)]

Dupe of bug 401443?

Comment 6

[Smokey Ardisson (offline for a while; not following bugs - do not email)]

Actually, since it's Hebrew, John just pushed the fix for bug 436663 this morning.  There's no full stack in there, just the ATS frames in great detail, but I do crash on this URL with that stack in a build that's a few days old, and then I don't crash when I update to get that patch.

I'm going to go ahead and dupe this to 436663; Gideon, please check with the next nightly, and if the crash still happens in that nightly, let us know.

Comment 7

[John Daggett (:jtd)]

Tested to make sure the fix for bug 436663 fixed this.

The test URL crashes with:

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.0.5pre) Gecko/2008110904 GranParadiso/3.0.5pre

The test URL does not crash with:

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.0.5pre) Gecko/2008111104 GranParadiso/3.0.5pre

Comment 8

[Gideon]

I do still crash. I'm not using the nightly pre,
if I understand this. I am, though, with OSX 10.5.5
and I updated to FF 3.0.4 before my latest try.

Comment 9

[John Daggett (:jtd)]

Right, the fix will be in 3.0.5, but not in 3.0.4.

To grab the latest nightly, use the URL below:

http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-mozilla1.9.0/