[webkit-reviews] review denied: [Bug 32257] Safari/Chromium crashes on complicated @font-face rule : [Attachment 44839] shared_node_v1

[bugzilla-daemon at webkit.org]

mitz at webkit.org has denied  review:
Bug 32257: Safari/Chromium crashes on complicated @font-face rule
https://bugs.webkit.org/show_bug.cgi?id=32257

Attachment 44839: shared_node_v1
https://bugs.webkit.org/attachment.cgi?id=44839&action=review

------- Additional Comments from mitz at webkit.org
This is incorrect. GlyphPageTreeNode instances must not outlive the FontData
instances that they reference. That’s why the trees are pruned when the
FontData are deleted. It is wrong to keep using the invalid GlyphPageTreeNodes.

To fix this bug, one must first understand whether the FontFallbackLists are
not getting invalidated as expected, and why.