[Webkit-unassigned] [Bug 85266] New: ASSERTION FAILED: m_purgePreventCount when clicking text with emphasis marks

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=85266

           Summary: ASSERTION FAILED: m_purgePreventCount when clicking
                    text with emphasis marks
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: kojiishi at gmail.com


Created an attachment (id=139587)
 --> (https://bugs.webkit.org/attachment.cgi?id=139587&action=review)
ASSERTION FAILED: m_purgePreventCount then crash in Font::emphasisMarkHeight

When text has emphasis marks, and the glyph for the emphasis mark does not exist in the font (i.e., system font fallback occurs,) ASSERTION FAILED: m_purgePreventCount. In my Debug builds of Mac OS Lion and Windows, Safari then crashes.

Reproduce steps:
1. Open the attached HTML file
2. Click on the text
-- OR --
1. Open the attached HTML file in DumpRenderTree

ASSERTION FAILED: m_purgePreventCount
/Users/kojiishi/WebKit/Source/WebCore/platform/graphics/FontCache.cpp(280) : WebCore::SimpleFontData *WebCore::FontCache::getCachedFontData(const WebCore::FontPlatformData *, WebCore::FontCache::ShouldRetain)
1   0x10cadd1ab WebCore::FontCache::getFontDataForCharacters(WebCore::Font const&, unsigned short const*, int)
2   0x10cae3875 WebCore::Font::glyphDataAndPageForCharacter(int, bool, WebCore::FontDataVariant) const
3   0x10cae27dc WebCore::Font::glyphDataForCharacter(int, bool, WebCore::FontDataVariant) const
4   0x10cae3f01 WebCore::Font::getEmphasisMarkGlyphData(WTF::AtomicString const&, WebCore::GlyphData&) const
5   0x10cae4156 WebCore::Font::emphasisMarkHeight(WTF::AtomicString const&) const
6   0x10cd435de WebCore::InlineFlowBox::computeOverAnnotationAdjustment(int) const
7   0x10d7ee58d WebCore::RootInlineBox::selectionTop() const
8   0x10d574434 WebCore::RenderBlock::positionForPointWithInlineChildren(WebCore::IntPoint const&)
9   0x10d574c41 WebCore::RenderBlock::positionForPoint(WebCore::IntPoint const&)
10  0x10ca5e133 WebCore::EventHandler::handleMousePressEventSingleClick(WebCore::MouseEventWithHitTestResults const&)
11  0x10ca5e878 WebCore::EventHandler::handleMousePressEvent(WebCore::MouseEventWithHitTestResults const&)
12  0x10ca62f73 WebCore::EventHandler::handleMousePressEvent(WebCore::PlatformMouseEvent const&)
13  0x10ca72262 WebCore::EventHandler::mouseDown(NSEvent*)
14  0x10bf45a97 -[WebHTMLView mouseDown:]
15  0x10b12777f -[EventSendingController mouseDown:withModifiers:]
16  0x7fff886a4f4c __invoking___
17  0x7fff886a4de4 -[NSInvocation invoke]
18  0x10d4b6ee0 JSC::Bindings::ObjcInstance::invokeObjcMethod(JSC::ExecState*, JSC::Bindings::ObjcMethod*)
19  0x10d4b6717 JSC::Bindings::ObjcInstance::invokeMethod(JSC::ExecState*, JSC::RuntimeMethod*)
20  0x10d7fd806 _ZN3JSCL17callRuntimeMethodEPNS_9ExecStateE
21  0x10b678b64 _ZN3JSC5LLIntL14handleHostCallEPNS_9ExecStateEPNS_11InstructionENS_7JSValueENS_22CodeSpecializationKindE
22  0x10b67979c JSC::LLInt::setUpCall(JSC::ExecState*, JSC::Instruction*, JSC::CodeSpecializationKind, JSC::JSValue, JSC::LLIntCallLinkInfo*)
23  0x10b679721 JSC::LLInt::genericCall(JSC::ExecState*, JSC::Instruction*, JSC::CodeSpecializationKind)
24  0x10b67716c llint_slow_path_call
25  0x10b67dc54 llint_op_call
26  0x10b49d679 JSC::JITCode::execute(JSC::RegisterFile*, JSC::ExecState*, JSC::JSGlobalData*)
27  0x10b4992c7 JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::ScopeChainNode*, JSC::JSObject*)
28  0x10b3a8a42 JSC::evaluate(JSC::ExecState*, JSC::ScopeChainNode*, JSC::SourceCode const&, JSC::JSValue, JSC::JSValue*)
29  0x10d0cfe0d WebCore::JSMainThreadExecState::evaluate(JSC::ExecState*, JSC::ScopeChainNode*, JSC::SourceCode const&, JSC::JSValue, JSC::JSValue*)
30  0x10d817543 WebCore::ScriptController::evaluateInWorld(WebCore::ScriptSourceCode const&, WebCore::DOMWrapperWorld*)
31  0x10d817674 WebCore::ScriptController::evaluate(WebCore::ScriptSourceCode const&)

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.