581034 - Invalid values in TT font leading to crash [@gfxUserFontSet::OnLoadComplete]

Status: RESOLVED WORKSFORME

(Core :: Graphics, defect)

Description

[Christoph Diehl [:posidron]]

Attachment: testcase

Build identifier: Mozilla/5.0 (X11; Linux x86_64; en-US; rv:2.0b2pre) Gecko/20100717 Minefield/4.0b2pre

Invalid values are:

Offsets: dict_items([(13726, "b'\\x80\\x00'"), (222, "b'@\\x00'")])

Load the provided html file.

Comment 1

[Christoph Diehl [:posidron]]

Attachment: callstack

Comment 2

[Jonathan Kew [:jfkthame]]

Either the reported platform & build ID or the callstack here is incorrect; that's a Mac OS X callstack.

Comment 3

[Christoph Diehl [:posidron]]

Attachment: callstack

Sorry. This is the right one.

Comment 4

[John Daggett (:jtd)]

> 286 fe->mLanguageOverride = pe->mLanguageOverride;

Christoph, are you running with latest source?  This looks like something I fixed last week.

Comment 5

[John Daggett (:jtd)]

Changeset from bug 578022 that should have fixed this:
http://hg.mozilla.org/mozilla-central/rev/3040b1aebdfa#l4.1

Let me know if you're definitely crashing with the revised code.

Comment 6

[Christoph Diehl [:posidron]]

No, I am no more able to reproduce it.
Tested:
Mozilla/5.0 (X11; Linux x86_64; rv:2.0b3pre) Gecko/20100723 Minefield/4.0b3pre

Comment 7

[John Daggett (:jtd)]

Ok, closing as WORKSFORME.  If you can reproduce it again somewhere, please reopen.