[Webkit-unassigned] [Bug 174404] New: REGRESSION: Crash in CoreText's TComponentFont::GetPhysicalFont()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=174404

            Bug ID: 174404
           Summary: REGRESSION: Crash in CoreText's
                    TComponentFont::GetPhysicalFont()
           Product: WebKit
           Version: WebKit Local Build
          Hardware: Macintosh
                OS: macOS 10.13
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: New Bugs
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: saagar at saagarjha.com

Created attachment 315189

  --> https://bugs.webkit.org/attachment.cgi?id=315189&action=review

Crash log of Safari Technology Preview

I'm seeing a regression in WebKit where it's crashing in TComponentFont::GetPhysicalFont(). I checked out a copy of the code and it looks like it's reaching the end of the font fallback list with .NotoSansUniversal and crashing after calling CTFontCopyPhysicalFont. A crash log is attached.

I've reproduced this on Safari Version 11.0 (13604.1.28.2), Safari Technology Preview Release 34 (Safari 11.0, WebKit 13604.1.27.0.1), and WebKit built from source this morning. I'm running macOS High Sierra 10.13 Beta (17A306f). I know that this works in Safari 10 on macOS Sierra.

Please let me know if this is a bug with CoreText so I can file a radar in Bug Reporter instead.

Examples that crash:
https://docs.travis-ci.com/user/notifications/
/LayoutTests/fast/text/system-font-fallback-emoji.html

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170711/c47cb9d1/attachment.html>