Closed Bug 489691 Opened 16 years ago Closed 16 years ago

Crash [@ GetAdvanceForGlyphs] with :first-letter, rtl

Categories

(Core :: Layout, defect)

x86
macOS
defect
Not set
critical

Tracking

()

VERIFIED FIXED

People

(Reporter: jruderman, Assigned: smontagu)

References

Details

(4 keywords)

Crash Data

Attachments

(1 file)

###!!! ASSERTION: Invalid offset: 'aOffset <= mSkipChars->mCharCount', file /Users/jruderman/central/gfx/thebes/src/gfxSkipChars.cpp, line 92 ###!!! ASSERTION: Substring out of range: 'aStart + aLength <= mCharacterCount', file /Users/jruderman/central/gfx/thebes/src/gfxFont.cpp, line 2130 Null deref [@ GetAdvanceForGlyphs]
Blocks: 332655
No longer blocks: randomclasses
Seems to be regression from bug 332655
Assignee: nobody → smontagu
Depends on: 490747
Fixed by bug 490747, http://hg.mozilla.org/mozilla-central/rev/051f635a1061 includes the testcase as a crashtest.
Flags: in-testsuite+
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → FIXED
verified FIXED on debug builds (no crash or asserts): Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1pre) Gecko/20090528 Shiretoko/3.5pre ID:20090528130303 and Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.2a1pre) Gecko/20090528 Minefield/3.6a1pre ID:20090528112613
Status: RESOLVED → VERIFIED
Crash Signature: [@ GetAdvanceForGlyphs]
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: