From Bugzilla Helper: User-Agent: Mozilla/5.0 (X11; U; Linux 2.4.3 i686; en-US; 0.8.1) Gecko/20010326 BuildID: 2001041011 I try to change the Serif font to microsoft-georgia-iso8859-1 and when I click on Ok, mozilla crashes Reproducible: Always Steps to Reproduce: 1.Edit->Preferences 2.Appearance->Fonts 3.Serif: microsoft-georgia-iso8859-1 4.Ok Actual Results: mozilla dies

Dupe of bug 68208?

dup. *** This bug has been marked as a duplicate of 68208 ***

I'll verify this, although I crashed at the first try to verify (talkback ID is TB30364441K). I had many windows open and my build (2001-05-12-08, Win NT) isn't very stable. Further tries worked for me.

ah, the stack trace differs from bug 68208. it's crashing in nsImageFrame.cpp. terri, d'you know if there's an existing bug in your area that'd cover this perchance? thx! i'll reopen this for the nonce. Incident ID 30364441 Trigger Time 2001-05-12 18:38:49 User Comments Tried to verify bug 75662. Failed. Build ID 2001050212 Product ID Netscape6.50 Platform ID Win32 Stack Trace 0x00000000 nsImageFrame::GetDesiredSize [d:\builds\seamonkey\mozilla\layout\html\base\src\nsImageFrame.cpp, line 728] nsHTMLReflowState::ComputeMargin [d:\builds\seamonkey\mozilla\layout\html\base\src\nsHTMLReflowState.cpp, line 2262] nsPref::GetBoolPref [d:\builds\seamonkey\mozilla\modules\libpref\src\nsPref.cpp, line 194] nsPrefBranch::SecuritySetCharPref [d:\builds\seamonkey\mozilla\modules\libpref\src\nsPrefBranch.cpp, line 710] nsLocalFile::GetParent [d:\builds\seamonkey\mozilla\xpcom\io\nsLocalFileWin.cpp, line 1532] WrappedNative_SetProperty [d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp, line 475] xpc3250.dll + 0x12e28 (0x60b82e28) js_InitAtomState [d:\builds\seamonkey\mozilla\js\src\jsatom.c, line 254] date_getYear [d:\builds\seamonkey\mozilla\js\src\jsdate.c, line 799] js_InitAtomState [d:\builds\seamonkey\mozilla\js\src\jsatom.c, line 256] date_getYear [d:\builds\seamonkey\mozilla\js\src\jsdate.c, line 799] js_InitAtomState [d:\builds\seamonkey\mozilla\js\src\jsatom.c, line 256] js_InitAtomState [d:\builds\seamonkey\mozilla\js\src\jsatom.c, line 274] js_EmitTree [d:\builds\seamonkey\mozilla\js\src\jsemit.c, line 1549] nsJSContext::CallEventHandler [d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp, line 949] GlobalWindowImpl::SizeToContent [d:\builds\seamonkey\mozilla\dom\src\base\nsGlobalWindow.cpp, line 1856] CSSDeclarationImpl::EnsureData [d:\builds\seamonkey\mozilla\content\html\style\src\nsCSSDeclaration.cpp, line 1238] CSSDeclarationImpl::RemoveProperty [d:\builds\seamonkey\mozilla\content\html\style\src\nsCSSDeclaration.cpp, line 3400] XULBroadcastListener::RemoveAttribute [d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 379] nsImageFrame::Reflow [d:\builds\seamonkey\mozilla\layout\html\base\src\nsImageFrame.cpp, line 815] nsListControlFrame::CaptureMouseEvents [d:\builds\seamonkey\mozilla\layout\html\forms\src\nsListControlFrame.cpp, line 1375] nsCSSFrameConstructor::ConstructTableColGroupFrame [d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, line 2764] nsGfxScrollFrame::QueryInterface [d:\builds\seamonkey\mozilla\layout\html\base\src\nsGfxScrollFrame.cpp, line 811] nsGfxScrollFrameInner::GetScrolledSize [d:\builds\seamonkey\mozilla\layout\html\base\src\nsGfxScrollFrame.cpp, line 1447] SetCoord [d:\builds\seamonkey\mozilla\content\html\style\src\nsCSSStyleRule.cpp, line 1678] CSSStyleRuleImpl::DeleteSelector [d:\builds\seamonkey\mozilla\content\html\style\src\nsCSSStyleRule.cpp, line 1488] nsGfxScrollFrame::QueryInterface [d:\builds\seamonkey\mozilla\layout\html\base\src\nsGfxScrollFrame.cpp] nsTableCellMap::GetCellAt [d:\builds\seamonkey\mozilla\layout\html\table\src\nsCellMap.cpp, line 238] nsViewManager::CreateDisplayList [d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 3120] nsScrollPortView::ScrollByWhole [d:\builds\seamonkey\mozilla\view\src\nsScrollPortView.cpp, line 507] nsViewManager::BothRectsFitInside [d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 2650] nsLookAndFeel::GetMetric [d:\builds\seamonkey\mozilla\widget\src\windows\nsLookAndFeel.cpp, line 210] nsTransferable::GetAnyTransferData [d:\builds\seamonkey\mozilla\widget\src\xpwidgets\nsTransferable.cpp, line 387] nsTransferable::FlavorsTransferableCanImport [d:\builds\seamonkey\mozilla\widget\src\xpwidgets\nsTransferable.cpp, line 586] nsTimerManager::QueryInterface [d:\builds\seamonkey\mozilla\widget\timer\src\windows\nsTimerManager.cpp] USER32.dll + 0x124c (0x77e7124c)

oops, the trace above is prolly not relevant to this bug! anyhow, cc'ing attinasi and hixie to see if they've heard of any recent crashers dealing with the Fonts pref panel. currently running a build, so it might be a while before i can get trace info...

Nope, no bug that I know of for this

confirming. i see this using 2001.05.14.12 verif comm bits on linux [it took me a couple rounds of changing the font type and size, but it did crash]. unfortunately, didn't get trace info since talkback didn't seem to register properly. shiva, do you know anything about that? currently running a debug build, will try to get further trace info when that's done. cc'ing mpt and timeless to see if they've heard of any recent crashers when fiddling with the Fonts pref panel. possibly related to bug 80382 and/or 80201?

d'oh. really cc'ing shiva this time.

wfm on linux, w2k. se can see this still... hmm.

I see a wrong build ID in the talkback data I produced. Actually I did not use 2001050212 but 2001051208. I unzipped the newer over the older. May that cause some of the (many) crashes I see with my build? Previously I used installer builds. Should I file a bug about talkback reporting wrong build IDs?

I don't particularly font. But, lot of crashes reported chaning preference entries. I have added change and font into our keyword list to monitor this crash.

my gcc xlib solaris 7 sparc build crashes _opening_ the fonts preference panel (all other panels work). However, I'm going to handle my xlib crashes separately as they are probably toolkit related.

dang it, now my linux debug refuses to crash when i change the font type and/or font size. feh. however, it still does crash when i change the dpi [trace is in bug 80382]. unable to crash on winnt [2001.05.14.04, comm verif] when changing font type and/or font size [so far]. will investigate mac soon...

Crashed in w98 build 2001051404, changing font Incident # 30443452 0x00000004 GKLAYOUT.DLL + 0x4664 (0x60314664) XPPREF32.DLL + 0x13f6 (0x60bd13f6) XPPREF32.DLL + 0x5099 (0x60bd5099) XPCOM.DLL + 0x2c5c1 (0x60e7c5c1) XPC3250.DLL + 0xfd7a (0x60b7fd7a) XPC3250.DLL + 0x12e28 (0x60b82e28) JS3250.DLL + 0x181f0 (0x60c881f0) JS3250.DLL + 0x1cf68 (0x60c8cf68) JS3250.DLL + 0x1822e (0x60c8822e) JS3250.DLL + 0x1cf68 (0x60c8cf68) JS3250.DLL + 0x1822e (0x60c8822e) JS3250.DLL + 0x184b5 (0x60c884b5) JS3250.DLL + 0x475a (0x60c7475a) JSDOM.DLL + 0x3184 (0x60543184) JSDOM.DLL + 0x15b14 (0x60555b14) GKCONTENT.DLL + 0xb6aaa (0x02236aaa) GKCONTENT.DLL + 0xb7aee (0x02237aee) GKCONTENT.DLL + 0xe00d8 (0x022600d8) GKLAYOUT.DLL + 0x1fe0d (0x6032fe0d) GKLAYOUT.DLL + 0x72e9b (0x60382e9b) GKLAYOUT.DLL + 0x72cc9 (0x60382cc9) GKLAYOUT.DLL + 0x1fd83 (0x6032fd83) GKLAYOUT.DLL + 0x1fc5a (0x6032fc5a) GKCONTENT.DLL + 0xb2443 (0x02232443) GKCONTENT.DLL + 0xb173c (0x0223173c) GKLAYOUT.DLL + 0x1fdab (0x6032fdab) GKLAYOUT.DLL + 0x1fbd0 (0x6032fbd0) GKVIEW.DLL + 0x143a (0x6045143a) GKVIEW.DLL + 0x72b7 (0x604572b7) GKVIEW.DLL + 0x1d64 (0x60451d64) GKWIDGET.DLL + 0x524a (0x60c2524a) GKWIDGET.DLL + 0x7ec3 (0x60c27ec3) GKWIDGET.DLL + 0x8292 (0x60c28292) GKWIDGET.DLL + 0x56db (0x60c256db) KERNEL32.DLL + 0x363b (0xbff7363b) KERNEL32.DLL + 0x24407 (0xbff94407) 0x006883ca

hrm, unable to crash on mac [2001.05.14.08, moz verif bits] when changing font type and/or font size...

Karnaze: looks like it crashes somewhere in layout. Could your team triage this bug ? thanks, Vishy

I also experienced a crash when changing my proportional fonts to Georgia and Veranda, and the sizes of proportional and fixed fonts to 13. The crash ocurred when I selected OK. OS: Windows 98 (First Edition) Mozilla version: Mozilla 0.9 Mozilla/5.0 (Windows; U; Win98; en-US; rv:0.9) Gecko/20010505 Stack dump (from Visual C++ 6.0): 00000054() XPCOM! 60e912a1() GKCONTENT! 60225c58() GKCONTENT! 60206a46() GKLAYOUT! 6035b4af() GKLAYOUT! 6033e0b6() GKLAYOUT! 6033e214() GKLAYOUT! 6035ed8e() GKLAYOUT! 60320b1c() GKLAYOUT! 6032188e() GKLAYOUT! 60322623() GKLAYOUT! 6032fcd6() GKCONTENT! 602194ee() GKLAYOUT! 6033e7fa() GKCONTENT! 602500be() GKCONTENT! 601e9f79() GKCONTENT! 601f5102() GKCONTENT! 6024e9ec() GKCONTENT! 6024e94f() GKPARSER! 603ebaf9() GKPARSER! 603eaa7e() GKCONTENT! 6025050c() NECKO! 6076316f() NECKO! 60756677() XPCOM! 60e961a7() Registers: EAX = 02A59050 EBX = 00000004 ECX = 02A5E67C EDX = 0068F0D4 ESI = 0068F0E0 EDI = 00000000 EIP = 00000054 ESP = 0068F0A8 EBP = 0068F0CC EFL = 00010207 MM0 = 000000000000FFFF MM1 = 9600000000000000 MM2 = 9600000000000000 MM3 = 0000000000000000 MM4 = 0000000000000000 MM5 = 0000000000000000 MM6 = 9700000000000000 MM7 = 8000000000000000 CS = 015F DS = 0167 ES = 0167 SS = 0167 FS = 0F3F GS = 0000 OV=0 UP=0 EI=1 PL=0 ZR=0 AC=0 PE=1 CY=1 ST0 = 1#SNAN ST1 = +1.50000000000000000e+0002 ST2 = +7.50000000000000000e+0001 ST3 = +0.00000000000000000e+0000 ST4 = +0.00000000000000000e+0000 ST5 = +0.00000000000000000e+0000 ST6 = +7.55000000000000000e+0001 ST7 = +1.00000000000000000e+0000 CTRL = 027F STAT = 4023 TAGS = FFFF EIP = 60308A2A CS = 015F DS = 0167 EDO = 603AB338

attinasi, I think you fixed a similar bug a few weeks ago.

Alex, this may be fixed already. It has been reported on Linux and Win98, so you might want to check it first with later builds (I did fix some other problems with crashing after changing prefs due to lingering observers).

No crash on w98 build 2001053104

tested with 2001052908 and 2001053021 on linux and the crash is not reproductible. works for me.

wfm using 2001.05.31.08 comm bits on linux; also doublechecked same bits on winnt and mac, and this wfm there too.

Cool. There is a bug 83715 on this happening on Mac OSX - did you happen to test there too?