[Webkit-unassigned] [Bug 32257] Safari/Chromium crashes on complicated @font-face rule

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=32257


mitz at webkit.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #44839|                            |review-
               Flag|                            |




--- Comment #9 from mitz at webkit.org  2009-12-14 21:18:19 PST ---
(From update of attachment 44839)
This is incorrect. GlyphPageTreeNode instances must not outlive the FontData
instances that they reference. That’s why the trees are pruned when the
FontData are deleted. It is wrong to keep using the invalid GlyphPageTreeNodes.
To fix this bug, one must first understand whether the FontFallbackLists are
not getting invalidated as expected, and why.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.