574613 - firefox segfaults after Pango failed to choose a font

Status: NEW

(Core :: Layout: Text and Fonts, defect)

Description

[Martin Stránský [:stransky] (ni? me) (PTO, Back Jul 29)]

Description of problem:
I am running machine in rhts and forwarding X session via ssh. After "firefox"
command is used, segfault is risen.

Now I am able to reproduce it on all architectures. See following instructions:
1. Install tigervnc-server: yum install tigervnc-server
2. Start vnc server: vncserver
 * and set password for your sessions
3. See on which port is vnc running:  ps aux | grep Xvnc
4. Set variable DISPLAY, for example: export DISPLAY=:1.0
 * mines was on 1 (I suppose it's by default)
5. Run firefox: firefox
6. You should be able to see something like:

(firefox:6431): Pango-WARNING **: failed to choose a font, expect ugly output.
engine-type='PangoRenderFc', script='common'
GConf Error: Failed to contact configuration server; some possible causes are
that you need to enable TCP/IP networking for ORBit, or you have stale NFS
locks due to a system crash. See http://projects.gnome.org/gconf/ for
information. (Details -  1: Failed to get connection to session:
/bin/dbus-launch terminated abnormally without any error message)

(firefox:6431): Pango-WARNING **: failed to choose a font, expect ugly output.
engine-type='PangoRenderFc', script='common'
GConf Error: Failed to contact configuration server; some possible causes are
that you need to enable TCP/IP networking for ORBit, or you have stale NFS
locks due to a system crash. See http://projects.gnome.org/gconf/ for
information. (Details -  1: Failed to get connection to session:
/bin/dbus-launch terminated abnormally without any error message)
/usr/lib64/firefox-3.6/run-mozilla.sh: line 131:  6431 Segmentation fault     
"$prog" ${1+"$@"}    

Backtrace:
#0  0x032cbcd1 in gfxPangoFcFont::GfxFont(gfxPangoFcFont*) ()
   from /usr/lib/xulrunner-1.9.2/libxul.so
No symbol table info available.
#1  0x032cab3f in gfxPangoFontGroup::GetFontAt (this=0xb3fac350, i=0)
    at gfxPangoFonts.cpp:1938
        pangoFont = 0x0
#2  0x031e1597 in nsThebesFontMetrics::GetMetrics (this=0xb3e0a2c0)
    at nsThebesFontMetrics.cpp:117
No locals.
#3  0x031e1b3b in nsThebesFontMetrics::GetExternalLeading (this=0xb3e0a2c0, 
    aLeading=@0xbfff91b8) at nsThebesFontMetrics.cpp:195
No locals.
#4  0x02b6ee4d in GetNormalLineHeight (aStyleContext=<value optimized out>, 
    aBlockHeight=<value optimized out>) at nsHTMLReflowState.cpp:2072
        normalLineHeight = <value optimized out>
        externalLeading = <value optimized out>
        internalLeading = <value optimized out>
        emHeight = <value optimized out>
#5  ComputeLineHeight (aStyleContext=<value optimized out>, 
    aBlockHeight=<value optimized out>) at nsHTMLReflowState.cpp:2122
        lhCoord = <value optimized out>
        fm = {<nsCOMPtr_base> = {mRawPtr = 0xb3e0a2c0}, <No data fields>}
#6  0x02b50271 in nsBlockReflowState::nsBlockReflowState (this=0xbfff9284,
    aReflowState=..., aPresContext=0xb403f000, aFrame=0xb4074b58, 
    aMetrics=..., aTopMarginRoot=1, aBottomMarginRoot=1, 
    aBlockNeedsFloatManager=1) at nsBlockReflowState.cpp:142
No locals.
#7  0x02b4de2b in nsBlockFrame::Reflow (this=0xb4074b58,