[Webkit-unassigned] [Bug 207236] New: Nullptr crash in WebCore::FontFamilySpecificationCoreText::fontRanges

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=207236

            Bug ID: 207236
           Summary: Nullptr crash in
                    WebCore::FontFamilySpecificationCoreText::fontRanges
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: All
                OS: All
            Status: NEW
          Keywords: InRadar
          Severity: Normal
          Priority: P2
         Component: Platform
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: shihchieh_lee at apple.com

<rdar://57214193>

    #0 0x1d97efed1 in std::__1::unique_ptr<WebCore::FontPlatformData, std::__1::default_delete<WebCore::FontPlatformData> >::operator*() const (Safari_ASAN_252438_4006e52f29bd69c480f3a82f222b8c74c5ba09e8.app/Contents/Frameworks/WebCore.framework/Versions/A/WebCore:x86_64+0x43f2ed1)
    #1 0x1d99ba791 in WebCore::FontFamilySpecificationCoreText::fontRanges(WebCore::FontDescription const&) const (Safari_ASAN_252438_4006e52f29bd69c480f3a82f222b8c74c5ba09e8.app/Contents/Frameworks/WebCore.framework/Versions/A/WebCore:x86_64+0x45bd791)
    #2 0x1d9836d9f in WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_1::operator()(WebCore::FontFamilySpecificationCoreText const&) const (Safari_ASAN_252438_4006e52f29bd69c480f3a82f222b8c74c5ba09e8.app/Contents/Frameworks/WebCore.framework/Versions/A/WebCore:x86_64+0x4439d9f)
    #3 0x1d9836cf6 in WTF::__multi_visitor_return_type<WTF::Visitor<WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_0, WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_1>, WTF::Variant<WTF::AtomString, WebCore::FontFamilySpecificationCoreText> const>::__type WTF::__visit_helper<0ul, WTF::__index_sequence<1l> >::__visit<WTF::Visitor<WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_0, WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_1>, WTF::Variant<WTF::AtomString, WebCore::FontFamilySpecificationCoreText> const>(WTF::Visitor<WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_0, WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_1>&, WTF::Variant<WTF::AtomString, WebCore::FontFamilySpecificationCoreText> const&) (Safari_ASAN_252438_4006e52f29bd69c480f3a82f222b8c74c5ba09e8.app/Contents/Frameworks/WebCore.framework/Versions/A/WebCore:x86_64+0x4439cf6)
    #4 0x1d9836c52 in WTF::__multi_visitor_return_type<WTF::Visitor<WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_0, WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_1>, WTF::Variant<WTF::AtomString, WebCore::FontFamilySpecificationCoreText> const&>::__type WTF::__visit_helper2<1l, 1ul>::__visit<WTF::Visitor<WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_0, WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_1>, WTF::Variant<WTF::AtomString, WebCore::FontFamilySpecificationCoreText> const&>(WTF::Visitor<WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_0, WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_1>&, WTF::Variant<WTF::AtomString, WebCore::FontFamilySpecificationCoreText> const&) (Safari_ASAN_252438_4006e52f29bd69c480f3a82f222b8c74c5ba09e8.app/Contents/Frameworks/WebCore.framework/Versions/A/WebCore:x86_64+0x4439c52)
    #5 0x1d9836bf2 in WTF::__multi_visitor_return_type<WTF::Visitor<WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_0, WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_1>, WTF::Variant<WTF::AtomString, WebCore::FontFamilySpecificationCoreText> const&>::__type WTF::__visit_helper<1ul, WTF::__index_sequence<> >::__visit<WTF::Visitor<WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_0, WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_1>, WTF::Variant<WTF::AtomString, WebCore::FontFamilySpecificationCoreText> const&>(WTF::Visitor<WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_0, WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_1>&, WTF::Variant<WTF::AtomString, WebCore::FontFamilySpecificationCoreText> const&) (Safari_ASAN_252438_4006e52f29bd69c480f3a82f222b8c74c5ba09e8.app/Contents/Frameworks/WebCore.framework/Versions/A/WebCore:x86_64+0x4439bf2)
    #6 0x1d9836782 in WTF::__multi_visitor_return_type<WTF::Visitor<WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_0, WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_1>&, WTF::Variant<WTF::AtomString, WebCore::FontFamilySpecificationCoreText> const&>::__type WTF::visit<WTF::Visitor<WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_0, WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_1>&, WTF::Variant<WTF::AtomString, WebCore::FontFamilySpecificationCoreText> const&>(WTF::Visitor<WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_0, WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*)::$_1>&, WTF::Variant<WTF::AtomString, WebCore::FontFamilySpecificationCoreText> const&) (Safari_ASAN_252438_4006e52f29bd69c480f3a82f222b8c74c5ba09e8.app/Contents/Frameworks/WebCore.framework/Versions/A/WebCore:x86_64+0x4439782)
    #7 0x1d982e9ea in WebCore::realizeNextFallback(WebCore::FontCascadeDescription const&, unsigned int&, WebCore::FontSelector*) (Safari_ASAN_252438_4006e52f29bd69c480f3a82f222b8c74c5ba09e8.app/Contents/Frameworks/WebCore.framework/Versions/A/WebCore:x86_64+0x44319ea)
    #8 0x1d982e20c in WebCore::FontCascadeFonts::realizeFallbackRangesAt(WebCore::FontCascadeDescription const&, unsigned int) (Safari_ASAN_252438_4006e52f29bd69c480f3a82f222b8c74c5ba09e8.app/Contents/Frameworks/WebCore.framework/Versions/A/WebCore:x86_64+0x443120c)
    #9 0x1d55aae48 in WebCore::FontCascadeFonts::primaryFont(WebCore::FontCascadeDescription const&) (Safari_ASAN_252438_4006e52f29bd69c480f3a82f222b8c74c5ba09e8.app/Contents/Frameworks/WebCore.framework/Versions/A/WebCore:x86_64+0x1ade48)
    #10 0x1d8c89748 in WebCore::FontCascade::fontMetrics() const (Safari_ASAN_252438_4006e52f29bd69c480f3a82f222b8c74c5ba09e8.app/Contents/Frameworks/WebCore.framework/Versions/A/WebCore:x86_64+0x388c748)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200204/5dbf8a61/attachment-0001.htm>