[Webkit-unassigned] [Bug 142814] New: Crash with SIGSEGV `WebCore::WidthIterator::advanceInternal`

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=142814

            Bug ID: 142814
           Summary: Crash with SIGSEGV
                    `WebCore::WidthIterator::advanceInternal`
    Classification: Unclassified
           Product: WebKit
           Version: 528+ (Nightly build)
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit Gtk
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: paulepanter at users.sourceforge.net

Created attachment 248919
  --> https://bugs.webkit.org/attachment.cgi?id=248919&action=review
(gdb) t a a bt f

Using Debian Sid/unstable with WebKitGTK+ 2.4.8, Evolution 3.12.10 crashed with a segmentation fault in `WebCore::WidthIterator::advanceInternal`.

    evolution[3038]: segfault at bf920ffc ip b579cca7 sp bf921000 error 6 in libwebkitgtk-3.0.so.0.22.14[b5527000+1c5c000]

With the core dump file, the following backtrace is recovered.

Core was generated by `evolution'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0xb579cca7 in WebCore::WidthIterator::advanceInternal<WebCore::Latin1TextIterator> (this=0xbf92167c, textIterator=...,
    glyphBuffer=0xbf921700) at ../Source/WebCore/platform/graphics/WidthIterator.cpp:162
162     ../Source/WebCore/platform/graphics/WidthIterator.cpp: Datei oder Verzeichnis nicht gefunden.
(gdb) t a a bt f
[…]
Thread 1 (Thread 0xb0255900 (LWP 3038)):
#0  0xb579cca7 in WebCore::WidthIterator::advanceInternal<WebCore::Latin1TextIterator> (this=0xbf92167c, textIterator=..., 
    glyphBuffer=0xbf921700) at ../Source/WebCore/platform/graphics/WidthIterator.cpp:162
        hasExtraSpacing = false
        lastFontData = <optimized out>
        lastGlyphCount = <optimized out>
        character = <optimized out>
        widthSinceLastRounding = -0
        lastRoundingWidth = <optimized out>
        bounds = <optimized out>
        clusterLength = <optimized out>
        charactersTreatedAsSpace = {<WTF::VectorBuffer<std::pair<int, WebCore::OriginalAdvancesForCharacterTreatedAsSpace>, 64u>> = {<WTF::VectorBufferBase<std::pair<int, WebCore::OriginalAdvancesForCharacterTreatedAsSpace> >> = {m_buffer = 0x0, m_capacity = 0, m_size = 0}, 
            m_inlineBuffer = {{__data = '\000' <repeats 15 times>, __align = {<No data fields>}} <repeats 64 times>}}, <No data fields>}
        consumedCharacters = <optimized out>
#1  0xb5799035 in WebCore::WidthIterator::advance (this=0xbf92167c, offset=<optimized out>, glyphBuffer=0xbf921700)
    at ../Source/WebCore/platform/graphics/WidthIterator.cpp:349
        textIterator = {m_characters = 0x9ad85074 "Von:\002", m_currentCharacter = 0, m_lastCharacter = 4}
        textIterator = {m_characters = 0x9ad85074, m_currentCharacter = 0, m_lastCharacter = 4, m_endCharacter = -1250325171}
[…]

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150318/fa039b7a/attachment-0002.html>