[Webkit-unassigned] [Bug 13245] New: wkConvertCharToGlyphs fails under gmalloc sometimes

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=13245

           Summary: wkConvertCharToGlyphs fails under gmalloc sometimes
           Product: WebKit
           Version: 522+ (nightly)
          Platform: Macintosh
        OS/Version: Mac OS X 10.4
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: New Bugs
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: mitz at webkit.org
                CC: bdash at webkit.org, ggaren at apple.com, koivisto at iki.fi


Running "run-webkit-tests -g editing" and attaching to DumpRenderTree with gdb,
I set a breakpoint at GlyphPageTreeNode.cpp:112 (this is in initializePage()
where it sets m_page to 0) with a breakpoint condition that pageNumber == 0.

The breakpoint was hit during one of the editing/style tests. Moving the PC
back to the statement that sets m_page to a new GlyphPage and stepping through
the code, I observed that in GlyphPage::fill(), wkGetGlyphVectorNumGlyphs()
returned 0. It also looked like wkConvertCharToGlyphs didn't touch the glyph
vector, despite being passed a valid buffer and a non-zero styleGroup. The font
was "TimesNewRomanPSMT 13.00 pt. S [] ...", which should have glyphs for most
characters in page 0.

This condition leads to a crash. I can't reproduce the condition (nor the
crash) when not using gmalloc. I was running the editing tests under gmalloc
because of recent test failures and crashes seen on the build bot, which made
me suspect memory was being trashed:
<http://build.webkit.org/post-commit-powerpc-mac-os-x/builds/6279/step-layout-test/0>,
<http://build.webkit.org/post-commit-powerpc-mac-os-x/builds/6280/step-layout-test/0>,
<http://build.webkit.org/post-commit-powerpc-mac-os-x/builds/6283/step-layout-test/0>,
<http://build.webkit.org/post-commit-powerpc-mac-os-x/builds/6289/step-layout-test/0>,
<http://build.webkit.org/post-commit-powerpc-mac-os-x/builds/6295/step-layout-test/0>.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.