[Webkit-unassigned] [Bug 22256] New: Reproduceable crash with @font-face and :first-letter pseudo class

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=22256

           Summary: Reproduceable crash with @font-face and :first-letter
                    pseudo class
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh
               URL: http://komendera.com/webkit/font-face-crash/article.html
        OS/Version: Mac OS X 10.5
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: CSS
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: dieter at komendera.com


Safari 3.1, 3.2 and WebKit r38386 on MacOS 10.5 crash on this testcase:
http://komendera.com/webkit/font-face-crash/article.html

The first letter of the paragraph is not displayed. Selecting the text of the
header and the paragraph crashes the browser reproducibly. 

Stacktrace:
0   com.apple.WebCore                   0x00f65ab4
WebCore::GlyphPageTreeNode::getChild(WebCore::FontData const*, unsigned int) +
180
1   com.apple.WebCore                   0x00f26a34
WebCore::Font::glyphDataForCharacter(int, bool, bool) const + 196
2   com.apple.WebCore                   0x01457a20
WebCore::WidthIterator::advance(int, WebCore::GlyphBuffer*) + 1072
3   com.apple.WebCore                   0x00f25c89
WebCore::Font::selectionRectForSimpleText(WebCore::TextRun const&,
WebCore::IntPoint const&, int, int, int) const + 89
4   com.apple.WebCore                   0x00f2652b
WebCore::Font::selectionRectForText(WebCore::TextRun const&, WebCore::IntPoint
const&, int, int, int) const + 187


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.