Bug 72527

Summary:	Mozilla crashes [@ nsTextFrame::TextStyle::TextStyle ]
Product:	Gentoo Linux	Reporter:	Martin von Gagern <Martin.vGagern>
Component:	Current packages	Assignee:	Mozilla Gentoo Team <mozilla>
Status:	RESOLVED FIXED
Severity:	critical
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://bugzilla.mozilla.org/show_bug.cgi?id=180309
Whiteboard:
Package list:		Runtime testing required:	---

Description Martin von Gagern 2004-11-26 01:14:27 UTC

I also posted this as a Mozilla bug at https://bugzilla.mozilla.org/show_bug.cgi?id=271825.
It might be related to bug#59849.

I have net-www/mozilla-1.7.3-r3 compiled from source.
net-www/mozilla-bin-1.7.3 works, but fonts get not antialiased.
I tried unmasking and using freetype-2.6.9, but this did not solve the problem.

The stack trace looks like this:
#0  0xffffe410 in ?? ()
#1  0xbfffc1fc in ?? ()
#2  0x4a448800 in ?? () from /lib/libc.so.6
#3  0xbfffc058 in ?? ()
#4  0x4a3c46e6 in nanosleep () from /lib/libc.so.6
#5  0x4a3c4504 in sleep () from /lib/libc.so.6
#6  0x0806b24f in ah_crap_handler(int) ()
#7  0xb6362315 in nsProfileLock::FatalSignalHandler(int) ()
   from /usr/lib/mozilla/components/libprofile.so
#8  <signal handler called>
#9  0xb71813c9 in nsTextFrame::TextStyle::TextStyle(nsIPresContext*,
nsIRenderingContext&, nsStyleContext*) () from
/usr/lib/mozilla/components/libgklayout.so
#10 0xb71756ea in nsTextFrame::GetLastInFlow() const ()
   from /usr/lib/mozilla/components/libgklayout.so
#11 0xb70fdfaf in nsContainerFrame::PaintChild(nsIPresContext*,
nsIRenderingContext&, nsRect const&, nsIFrame*, nsFramePaintLayer, unsigned) ()
   from /usr/lib/mozilla/components/libgklayout.so
#12 0xb70e12c7 in nsBlockFrame::PaintChild(nsIPresContext*,
nsIRenderingContext&, nsRect const&, nsIFrame*, nsFramePaintLayer, unsigned) ()
   from /usr/lib/mozilla/components/libgklayout.so
#13 0xb70f1ae7 in nsBlockFrame::GetDepth() const ()
   from /usr/lib/mozilla/components/libgklayout.so


ldd /usr/lib/mozilla/components/libgklayout.so
        linux-gate.so.1 =>  (0xffffe000)
        libgkgfx.so => /usr/lib/mozilla/libgkgfx.so (0xb7748000)
        libxpcom.so => /usr/lib/mozilla/libxpcom.so (0xb761b000)
        libplds4.so => /usr/lib/mozilla/libplds4.so (0xb7617000)
        libplc4.so => /usr/lib/mozilla/libplc4.so (0xb7612000)
        libnspr4.so => /usr/lib/mozilla/libnspr4.so (0xb75d9000)
        libpthread.so.0 => /lib/libpthread.so.0 (0xb75c8000)
        libdl.so.2 => /lib/libdl.so.2 (0xb75c5000)
        libmozjs.so => /usr/lib/mozilla/libmozjs.so (0xb7532000)
        libgtk-x11-2.0.so.0 => /usr/lib/libgtk-x11-2.0.so.0 (0xb727d000)
        libgdk-x11-2.0.so.0 => /usr/lib/libgdk-x11-2.0.so.0 (0xb720f000)
        libatk-1.0.so.0 => /usr/lib/libatk-1.0.so.0 (0xb71f5000)
        libgdk_pixbuf-2.0.so.0 => /usr/lib/libgdk_pixbuf-2.0.so.0 (0xb71e0000)
        libpangoxft-1.0.so.0 => /usr/lib/libpangoxft-1.0.so.0 (0xb71db000)
        libpangox-1.0.so.0 => /usr/lib/libpangox-1.0.so.0 (0xb71d0000)
        libpango-1.0.so.0 => /usr/lib/libpango-1.0.so.0 (0xb719a000)
        libgobject-2.0.so.0 => /usr/lib/libgobject-2.0.so.0 (0xb7165000)
        libgmodule-2.0.so.0 => /usr/lib/libgmodule-2.0.so.0 (0xb7161000)
        libglib-2.0.so.0 => /usr/lib/libglib-2.0.so.0 (0xb70e8000)
        libm.so.6 => /lib/libm.so.6 (0xb70c7000)
        libstdc++.so.5 =>
/usr/lib/gcc-lib/i686-pc-linux-gnu/3.3.4/libstdc++.so.5 (0xb6ffb000)
        libgcc_s.so.1 => /usr/lib/gcc-lib/i686-pc-linux-gnu/3.3.4/libgcc_s.so.1
(0xb6ff1000)
        libc.so.6 => /lib/libc.so.6 (0xb6ee7000)
        /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x80000000)
        libX11.so.6 => /usr/X11R6/lib/libX11.so.6 (0xb6e21000)
        libXrandr.so.2 => /usr/X11R6/lib/libXrandr.so.2 (0xb6e1d000)
        libXi.so.6 => /usr/X11R6/lib/libXi.so.6 (0xb6e15000)
        libXext.so.6 => /usr/X11R6/lib/libXext.so.6 (0xb6e06000)
        libXft.so.2 => /usr/X11R6/lib/libXft.so.2 (0xb6df4000)
        libfreetype.so.6 => /usr/lib/libfreetype.so.6 (0xb6d85000)
        libXrender.so.1 => /usr/X11R6/lib/libXrender.so.1 (0xb6d7d000)
        libfontconfig.so.1 => /usr/lib/libfontconfig.so.1 (0xb6d57000)
        libXcursor.so.1 => /usr/X11R6/lib/libXcursor.so.1 (0xb6d4e000)
        libpangoft2-1.0.so.0 => /usr/lib/libpangoft2-1.0.so.0 (0xb6d26000)
        libexpat.so.0 => /usr/lib/libexpat.so.0 (0xb6d07000)
        libz.so.1 => /lib/libz.so.1 (0xb6cf7000)


Reproducible: Always
Steps to Reproduce:
1. Visit http://www.sparc.org/
2. Wait till page is loaded
3. If mozilla is still alive, click "Workstation"

Actual Results:  
Mozilla crashes, if compiled without USE=debug with Segfault, otherwise with
something like this:
UNKNOWN [/usr/lib/mozilla/components/libwidget_gtk2.so +0x00032B4E]
nsWindow::OnExposeEvent(_GtkWidget*, _GdkEventExpose*)+0x00000113
[/usr/lib/mozilla/components/libwidget_gtk2.so +0x00024B15]
UNKNOWN [/usr/lib/mozilla/components/libwidget_gtk2.so +0x00029164]
Sleeping for 5 minutes.
Type 'gdb /usr/lib/mozilla/mozilla-bin 8176' to attach your debugger to this thread.


Expected Results:  
Page displayed.


I changed recently changed the following things:
- transition from XFree86 to X.org
- usage of native posix threads
I recompiled mozilla after those changes

I have those relevant packages installed:
- media-libs/freetype-1.3.1-r3 *
- media-libs/freetype-2.1.9 *
- x11-base/xorg-x11-6.8.0-r3 *

# emerge info
Portage 2.0.51-r3 (default-linux/x86/2004.3, gcc-3.3.4, glibc-2.3.4.20040808-r1,
2.6.9-gentoo-r4 i686)
=================================================================
System uname: 2.6.9-gentoo-r4 i686 Mobile Intel(R) Pentium(R) 4 - M CPU 2.00GHz
Gentoo Base System version 1.4.16
distcc 2.16 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled]
ccache version 2.3 [enabled]
Autoconf: sys-devel/autoconf-2.59-r5
Automake: sys-devel/automake-1.8.5-r1
Binutils: sys-devel/binutils-2.14.90.0.8-r1
Headers:  sys-kernel/linux26-headers-2.6.8.1
Libtools: sys-devel/libtool-1.5.2-r5
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CFLAGS="-O2 -march=pentium4 -fomit-frame-pointer -pipe"
CHOST="i686-pc-linux-gnu"
COMPILER=""
CONFIG_PROTECT="/etc /usr/X11R6/lib/X11/xkb /usr/kde/2/share/config
/usr/kde/3.2/share/config /usr/kde/3.3/env /usr/kde/3.3/share/config
/usr/kde/3.3/shutdown /usr/kde/3/share/config /usr/lib/mozilla/defaults/pref
/usr/share/config /usr/share/texmf/dvipdfm/config/
/usr/share/texmf/dvips/config/ /usr/share/texmf/tex/generic/config/
/usr/share/texmf/tex/platex/config/ /usr/share/texmf/xdvi/ /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-O2 -march=pentium4 -fomit-frame-pointer -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoaddcvs autoconfig ccache distlocks sandbox sfperms"
GENTOO_MIRRORS="http://gentoo.mirror.icd.hu/ ftp://mirror.nutsmaas.nl/gentoo/
ftp://sunsite.informatik.rwth-aachen.de/pub/Linux/gentoo"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.de.gentoo.org/gentoo-portage"
USE="X acpi alsa arts avi berkdb bitmap-fonts cdr crypt cups curl divx4linux dvd
dvdr encode esd f77 fam flac foomaticdb fortran gd gdbm gif gphoto2 gpm gtk gtk2
imagemagick imap imlib innodb ipv6 java jpeg junit kde libg++ libwww lirc mad
maildir mailwrapper mikmod mmx motif mozilla mpeg mule mysql ncurses nls nptl
oggvorbis opengl oss pam pcmcia pdflib perl pic png pnp python qt quicktime
readline samba sasl sdl slang speex spell sse ssl svga tcltk tcpd tetex tiff
truetype trusted unicode usb wavelan x86 xml xml2 xmms xv zlib"

Comment 1 Martin von Gagern 2005-03-09 11:33:59 UTC

OK, I found out that this bug is a dup of mozilla 183729,
https://bugzilla.mozilla.org/show_bug.cgi?id=183729
The problem were some TTF files having mode 0400. Removing them solved the problem for me, and the crash itself is described and handled in this mozilla bug.

So this bug here should be closed, but with wat resolution?

Comment 2 Jakub Moc (RETIRED) gentoo-dev

2005-12-23 03:33:18 UTC

Should be fixed in >= 1.7.6, if that's not the case, you should reopen/comment on the upstream bug.

https://bugzilla.mozilla.org/show_bug.cgi?id=180309