890272 - crash in SkScalerContext::MakeRec

Status: VERIFIED FIXED

(Core :: Graphics, defect)

Description

[u421692]

This bug was filed from the Socorro interface and is 
report bp-7b04972b-4721-4285-8324-77ac52130704 .
 ============================================================= 
Environment:
Samsung Galaxy Tab(Android 4.0.4)/LG Nexus 4(Android 4.2.2)
Firefox 25.0a1 (2013-07-04)

Steps to reproduce:
1. Play any type of flash content.

Expected result:
Flash content is played without any issues.

Actual result:
Flash content never starts playing, Firefox crashes.

https://crash-stats.mozilla.com/report/index/7b04972b-4721-4285-8324-77ac52130704

Crashing Thread
Frame 	Module 	Signature 	Source
0 	libxul.so 	SkScalerContext::MakeRec(SkPaint const&, SkDeviceProperties const*, SkMatrix const*, SkScalerContextRec*) 	/builds/slave/m-in-and-000000000000000000000/build/obj-firefox/gfx/skia/../../../gfx/skia/include/core/SkTypeface.h
1 	libxul.so 	SkPaint::descriptorProc(SkDeviceProperties const*, SkMatrix const*, void (*)(SkTypeface*, SkDescriptor const*, void*), void*, bool) const 	/builds/slave/m-in-and-000000000000000000000/build/obj-firefox/gfx/skia/../../../gfx/skia/src/core/SkPaint.cpp
2 	libxul.so 	SkPaint::getFontMetrics(SkPaint::FontMetrics*, float) const 	/builds/slave/m-in-and-000000000000000000000/build/obj-firefox/gfx/skia/../../../gfx/skia/src/core/SkPaint.cpp
3 	libxul.so 	anp_getFontMetrics 	/builds/slave/m-in-and-000000000000000000000/build/obj-firefox/other-licenses/skia-npapi/../../../other-licenses/skia-npapi/ANPPaint.cpp
4 	libflashplayer.so 	NP_Shutdown 	
5 	dalvik-mark-stack (deleted) 	dalvik-mark-stack (deleted)@0x4064553 	
6 	libicuuc.so 	libicuuc.so@0x90553 	
7 	libflashplayer.so 	NP_Shutdown 	
8 	libflashplayer.so 	NP_Shutdown 	
9 	libflashplayer.so 	NP_Shutdown 	
10 	libflashplayer.so 	NP_Shutdown 	
11 	dalvik-mark-stack (deleted) 	dalvik-mark-stack (deleted)@0x4064553 	
12 	libicuuc.so 	libicuuc.so@0x90553 	
13 	libflashplayer.so 	NP_Shutdown 	
14 		@0x7fffffd 	
15 	libflashplayer.so 	NP_Shutdown 	
16 	libflashplayer.so 	libflashplayer.so@0x5009df 	
17 	libc.so 	libc.so@0x12232 	
18 	libflashplayer.so 	NP_Shutdown 	
19 		@0x5ced73ae 	
20 	libflashplayer.so 	NP_Shutdown 	
21 	libflashplayer.so 	NP_Shutdown

Comment 1

[Scoobidiver (away)]

Hit by three users in 25.0a1/20130704. The regression range is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=b48e06621dc9&tochange=dcbbfcdf7bb4
It might be a regression from bug 848491.

Comment 2

[George Wright (:gw280) (needinfo me!)]

Looks like it's caused by bug 736276 landing. I will get it fixed.

Comment 4

[George Wright (:gw280) (needinfo me!)]

Attachment: fix skfonthost on android

Comment 5

[George Wright (:gw280) (needinfo me!)]

https://hg.mozilla.org/integration/mozilla-inbound/rev/c460559cdf97

Comment 6

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/mozilla-central/rev/c460559cdf97

Comment 7

[u421692]

Verified fixed on:
Build: Firefox for Android 25.0a1
Device: LG Nexus 4
OS: Android 4.2.2

Comment 8

[u421692]

Verified fixed on:
Build: Firefox for Android 25.0a1(2013-07-17)
Device: LG Nexus 4
OS: Android 4.2.2