Package: mozilla Severity: important
Hi, I've being experiencing reproducible crashes on all mozilla-related programs. This occured a while ago, but seemed to disappear when I upgraded my packages. After the most recent update, however, it came back again. So far I've managed to narrow down the problem to an issue with regards to fonts. This line of HTML is sufficient to cause mozilla-browser, firefox and galeon to crash: <div style="font-family: 'Tahoma'">boo.</div> So far replacing font-family with "Lucida Sans Unicode" also causes the segfault. However "Arial", "Times New Roman" and "Georgia" all do not affect it; neither does an invalid font name like "Foo". Tahoma and Lucida Sans Unicode are both installed on my system; I tried removing them through dfontmgr, but I think I'd need to restart X to really check if doing that helps. Running /usr/bin/mozilla-bin through gdb gives me this: ----------------------------------------------------------- Program received signal SIGSEGV, Segmentation fault. [Switching to Thread -1217949568 (LWP 4654)] 0xb6f5ecac in nsHTMLReflowState::UseComputedHeight () from /usr/lib/mozilla/components/libgklayout.so ----------------------------------------------------------- The first 10 backtraces are shown below: ----------------------------------------------------------- #0 0xb6f5ecac in nsHTMLReflowState::UseComputedHeight () from /usr/lib/mozilla/components/libgklayout.so #1 0xb6f5edf2 in nsHTMLReflowState::UseComputedHeight () from /usr/lib/mozilla/components/libgklayout.so #2 0xb6f5eed1 in nsHTMLReflowState::CalcLineHeight () from /usr/lib/mozilla/components/libgklayout.so #3 0xb6f43508 in nsBlockReflowState::nsBlockReflowState () from /usr/lib/mozilla/components/libgklayout.so #4 0xb6f390af in nsBlockFrame::IsContainingBlock () from /usr/lib/mozilla/components/libgklayout.so #5 0xb6f42730 in nsBlockReflowContext::ReflowBlock () from /usr/lib/mozilla/components/libgklayout.so #6 0xb6f3c634 in nsBlockFrame::ReflowBlockFrame () from /usr/lib/mozilla/components/libgklayout.so #7 0xb6f3b287 in nsBlockFrame::ReflowLine () from /usr/lib/mozilla/components/libgklayout.so #8 0xb6f3af83 in nsBlockFrame::ReflowDirtyLines () from /usr/lib/mozilla/components/libgklayout.so #9 0xb6f39156 in nsBlockFrame::IsContainingBlock () from /usr/lib/mozilla/components/libgklayout.so #10 0xb6f42730 in nsBlockReflowContext::ReflowBlock () from /usr/lib/mozilla/components/libgklayout.so ----------------------------------------------------------- The exact same segfault and backtrace occurs when I start up mozilla-thunderbird, so I believe they are all related to how font rendering is being handled. There is a thunderbird bug which I think showcases the same problem: #285728 Mozilla bug #276558 is also related; the site given as an example uses the Tahoma font. -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.9 Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1) Versions of packages mozilla depends on: ii dpkg 1.10.27 Package maintenance system for Deb ii mozilla-browser 2:1.7.5-1 The Mozilla Internet application s pn mozilla-mailnews Not found. ii mozilla-psm 2:1.7.5-1 The Mozilla Internet application s -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
