[webkit-reviews] review denied: [Bug 32257] Safari/Chromium crashes on complicated @font-face rule : [Attachment 44839] shared_node_v1

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Dec 14 21:18:18 PST 2009

mitz at webkit.org has denied  review:
Bug 32257: Safari/Chromium crashes on complicated @font-face rule

Attachment 44839: shared_node_v1

------- Additional Comments from mitz at webkit.org
This is incorrect. GlyphPageTreeNode instances must not outlive the FontData
instances that they reference. That’s why the trees are pruned when the
FontData are deleted. It is wrong to keep using the invalid GlyphPageTreeNodes.

To fix this bug, one must first understand whether the FontFallbackLists are
not getting invalidated as expected, and why.

More information about the webkit-reviews mailing list