On Mon, May 01, 2006 at 02:50:08PM +0200, Oskar Liljeblad wrote: > Package: mozilla-firefox > Version: 1.5.dfsg+1.5.0.2-3 > Severity: normal > > With ttf-dejavu (2.4.1-1) install, Firefox crashes on http://en.wikipedia.org. > Here's the stack trace: > > #0 0x00002b17eda6f44d in cairo_status_to_string () from > /usr/lib/libcairo.so.2 > #1 0x00002b17eda6f7d1 in cairo_status_to_string () from > /usr/lib/libcairo.so.2 > #2 0x00002b17eda83589 in cairo_ft_scaled_font_unlock_face () > from /usr/lib/libcairo.so.2 > #3 0x00002b17eda7150e in cairo_scaled_font_glyph_extents () > from /usr/lib/libcairo.so.2 > #4 0x00002b17ecfa906b in pango_cairo_fc_font_get_type () > from /usr/lib/libpangocairo-1.0.so.0 > #5 0x00002b17ee27f590 in pango_ot_buffer_output () > from /usr/lib/libpangoft2-1.0.so.0 > #6 0x00002aaaac5db762 in ?? () > from /usr/lib/pango/1.5.0/modules/pango-basic-fc.so > #7 0x00002b17ed949107 in pango_shape () from /usr/lib/libpango-1.0.so.0 > #8 0x00002b17ed93d6d4 in pango_layout_line_index_to_x () > from /usr/lib/libpango-1.0.so.0 > #9 0x00002b17ed940208 in pango_layout_iter_get_char_extents () > from /usr/lib/libpango-1.0.so.0 > #10 0x00002b17ed940a28 in pango_layout_iter_get_char_extents () > from /usr/lib/libpango-1.0.so.0 > #11 0x00002b17ed9428f1 in pango_layout_get_line () > from /usr/lib/libpango-1.0.so.0 > #12 0x00000000005d92f6 in nsFontMetricsPango::FixupSpaceWidths ( > this=0x22ccc40, aLayout=0x1c9c960, > aString=0xfffffffffdd98690 <Address 0xfffffffffdd98690 out of bounds>) > at nsFontMetricsPango.cpp:1518 > #13 0x00000000005da73e in nsFontMetricsPango::GetWidth (this=0x22ccc40, > aString=0x1c8daf0 "Ti???ng Vi??\207t (Vietnamese)", aLength=27, > [EMAIL PROTECTED], aContext=<value optimized out>) > at nsFontMetricsPango.cpp:469 > #14 0x00000000005d944c in nsFontMetricsPango::GetTextDimensionsInternal ( > this=0x22ccc40, aString=0x1c8daf0 "Ti???ng Vi??\207t (Vietnamese)", > aLength=27, aAvailWidth=6068, aBreaks=0x23debf0, aNumBreaks=5, > [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED], aContext=0x17b7340) > at nsFontMetricsPango.cpp:1442 > #15 0x00000000005d97de in nsFontMetricsPango::GetTextDimensions ( > this=0x22ccc40, aString=0x7fffffab1374, aLength=23, aAvailWidth=6068, > aBreaks=0x7fffffab100c, aNumBreaks=5, [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED], > aFontID=0x0, aContext=0xfffffffffdd98690) at nsFontMetricsPango.cpp:667 > #16 0x00000000005d0fd1 in nsRenderingContextGTK::GetTextDimensions ( > this=<value optimized out>, aString=0x7fffffab0710, aLength=-36075888, > aAvailWidth=11, aBreaks=0xffffffffaabe9c74, aNumBreaks=14262, > [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED], aFontID=0x2326ac0) > at nsRenderingContextGTK.cpp:1305 > #17 0x00000000006d64ba in nsTextFrame::MeasureText (this=0x20bee78, > aPresContext=0x1da5d50, [EMAIL PROTECTED], [EMAIL PROTECTED], > aLb=0x1f4a9b0, [EMAIL PROTECTED], [EMAIL PROTECTED]) > at nsTextFrame.cpp:5503 > #18 0x00000000006d8e10 in nsTextFrame::Reflow (this=0x20bee78, > aPresContext=0x1da5d50, [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED]) > at nsTextFrame.cpp:5980 > #19 0x00000000006b11ea in nsLineLayout::ReflowFrame (this=0x7fffffab1d10, > aFrame=0x20bee78, [EMAIL PROTECTED], aMetrics=0x0, > [EMAIL PROTECTED]) at nsLineLayout.cpp:995 > #20 0x00000000006ab6e3 in nsInlineFrame::ReflowInlineFrame (this=0x20bee20, > aPresContext=0x1da5d50, aReflowState=<value optimized out>, > [EMAIL PROTECTED], aFrame=0x20bee78, [EMAIL PROTECTED]) > at nsInlineFrame.cpp:684 > #21 0x00000000006ab9ab in nsInlineFrame::ReflowFrames (this=0x20bee20, > aPresContext=0x1da5d50, [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED]) at nsInlineFrame.cpp:519 > #22 0x00000000006abdf9 in nsInlineFrame::Reflow (this=0x20bee20, > aPresContext=0x1da5d50, [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED]) > at nsInlineFrame.cpp:429 > #23 0x00000000006b11ea in nsLineLayout::ReflowFrame (this=0x7fffffab1d10, > aFrame=0x20bee20, [EMAIL PROTECTED], aMetrics=0x0, > [EMAIL PROTECTED]) at nsLineLayout.cpp:995 > #24 0x0000000000680262 in nsBlockFrame::ReflowInlineFrame (this=0x20bb5c8, > [EMAIL PROTECTED], [EMAIL PROTECTED], aLine= > {mCurrent = 0x23d91f0}, aFrame=0x20bee20, > aLineReflowStatus=0x7fffffab1cb7 "") at nsBlockFrame.cpp:4013 > #25 0x0000000000680893 in nsBlockFrame::DoReflowInlineFrames (this=0x20bb5c8, > [EMAIL PROTECTED], [EMAIL PROTECTED], aLine= > {mCurrent = 0x23d91f0}, aKeepReflowGoing=0x7fffffab1fbc, > aLineReflowStatus=0x7fffffab1dff "\002", aUpdateMaximumWidth=0, > aDamageDirtyArea=0) at nsBlockFrame.cpp:3852 > #26 0x0000000000680b5a in nsBlockFrame::ReflowInlineFrames (this=0x20bb5c8, > [EMAIL PROTECTED], aLine={mCurrent = 0x23d91f0}, > aKeepReflowGoing=0x7fffffab1fbc, aDamageDirtyArea=0, > aUpdateMaximumWidth=0) > at nsBlockFrame.cpp:3734 > #27 0x0000000000680da7 in nsBlockFrame::ReflowLine (this=0x1c9c960, > [EMAIL PROTECTED], aLine={mCurrent = 0x23d91f0}, > aKeepReflowGoing=0x7fffffab1fbc, aDamageDirtyArea=0) > at nsBlockFrame.cpp:2728 > #28 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x20bb5c8, > [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262 > #29 0x000000000068254a in nsBlockFrame::Reflow (this=0x20bb5c8, > aPresContext=0x1da5d50, [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED]) > at nsBlockFrame.cpp:902 > #30 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock ( > this=0x7fffffab2650, aSpace=<value optimized out>, > aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], > aClearance=<value optimized out>, > aIsAdjacentWithTop=<value optimized out>, > [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605 > #31 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x20bb340, > [EMAIL PROTECTED], aLine={mCurrent = 0x20bf3b8}, > aKeepReflowGoing=0x7fffffab29ac) at nsBlockFrame.cpp:3449 > #32 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x20bb340, > [EMAIL PROTECTED], aLine={mCurrent = 0x20bf3b8}, > aKeepReflowGoing=0x7fffffab29ac, aDamageDirtyArea=0) > at nsBlockFrame.cpp:2610 > #33 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x20bb340, > [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262 > #34 0x000000000068254a in nsBlockFrame::Reflow (this=0x20bb340, > aPresContext=0x1da5d50, [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED]) > at nsBlockFrame.cpp:902 > #35 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock ( > this=0x7fffffab3040, aSpace=<value optimized out>, > aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], > aClearance=<value optimized out>, > aIsAdjacentWithTop=<value optimized out>, > [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605 > #36 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x20bb128, > [EMAIL PROTECTED], aLine={mCurrent = 0x20bff28}, > aKeepReflowGoing=0x7fffffab339c) at nsBlockFrame.cpp:3449 > #37 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x20bb128, > [EMAIL PROTECTED], aLine={mCurrent = 0x20bff28}, > aKeepReflowGoing=0x7fffffab339c, aDamageDirtyArea=0) > at nsBlockFrame.cpp:2610 > #38 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x20bb128, > [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262 > #39 0x000000000068254a in nsBlockFrame::Reflow (this=0x20bb128, > aPresContext=0x1da5d50, [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED]) > at nsBlockFrame.cpp:902 > #40 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock ( > this=0x7fffffab3a30, aSpace=<value optimized out>, > aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], > aClearance=<value optimized out>, > aIsAdjacentWithTop=<value optimized out>, > [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605 > #41 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x20baf10, > [EMAIL PROTECTED], aLine={mCurrent = 0x20c00c0}, > aKeepReflowGoing=0x7fffffab3d8c) at nsBlockFrame.cpp:3449 > #42 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x20baf10, > [EMAIL PROTECTED], aLine={mCurrent = 0x20c00c0}, > aKeepReflowGoing=0x7fffffab3d8c, aDamageDirtyArea=0) > at nsBlockFrame.cpp:2610 > #43 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x20baf10, > [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262 > #44 0x000000000068254a in nsBlockFrame::Reflow (this=0x20baf10, > aPresContext=0x1da5d50, [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED]) > at nsBlockFrame.cpp:902 > #45 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock ( > this=0x7fffffab4420, aSpace=<value optimized out>, > aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], > aClearance=<value optimized out>, > aIsAdjacentWithTop=<value optimized out>, > [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605 > #46 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x20b60d8, > [EMAIL PROTECTED], aLine={mCurrent = 0x20c0258}, > aKeepReflowGoing=0x7fffffab477c) at nsBlockFrame.cpp:3449 > #47 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x20b60d8, > [EMAIL PROTECTED], aLine={mCurrent = 0x20c0258}, > aKeepReflowGoing=0x7fffffab477c, aDamageDirtyArea=0) > at nsBlockFrame.cpp:2610 > #48 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x20b60d8, > [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262 > #49 0x000000000068254a in nsBlockFrame::Reflow (this=0x20b60d8, > aPresContext=0x1da5d50, [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED]) > at nsBlockFrame.cpp:902 > #50 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock ( > this=0x7fffffab4e10, aSpace=<value optimized out>, > aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], > aClearance=<value optimized out>, > aIsAdjacentWithTop=<value optimized out>, > [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605 > #51 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x20b4830, > [EMAIL PROTECTED], aLine={mCurrent = 0x20c03f0}, > aKeepReflowGoing=0x7fffffab516c) at nsBlockFrame.cpp:3449 > #52 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x20b4830, > [EMAIL PROTECTED], aLine={mCurrent = 0x20c03f0}, > aKeepReflowGoing=0x7fffffab516c, aDamageDirtyArea=0) > at nsBlockFrame.cpp:2610 > #53 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x20b4830, > [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262 > #54 0x000000000068254a in nsBlockFrame::Reflow (this=0x20b4830, > aPresContext=0x1da5d50, [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED]) > at nsBlockFrame.cpp:902 > #55 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock ( > this=0x7fffffab5800, aSpace=<value optimized out>, > aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], > aClearance=<value optimized out>, > aIsAdjacentWithTop=<value optimized out>, > [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605 > #56 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x20b3ed0, > [EMAIL PROTECTED], aLine={mCurrent = 0x20c06e0}, > aKeepReflowGoing=0x7fffffab5b5c) at nsBlockFrame.cpp:3449 > #57 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x20b3ed0, > [EMAIL PROTECTED], aLine={mCurrent = 0x20c06e0}, > aKeepReflowGoing=0x7fffffab5b5c, aDamageDirtyArea=0) > at nsBlockFrame.cpp:2610 > #58 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x20b3ed0, > [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262 > #59 0x000000000068254a in nsBlockFrame::Reflow (this=0x20b3ed0, > aPresContext=0x1da5d50, [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED]) > at nsBlockFrame.cpp:902 > #60 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock ( > this=0x7fffffab61f0, aSpace=<value optimized out>, > aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], > aClearance=<value optimized out>, > aIsAdjacentWithTop=<value optimized out>, > [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605 > #61 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x2065908, > [EMAIL PROTECTED], aLine={mCurrent = 0x20c13c0}, > aKeepReflowGoing=0x7fffffab654c) at nsBlockFrame.cpp:3449 > #62 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x2065908, > [EMAIL PROTECTED], aLine={mCurrent = 0x20c13c0}, > aKeepReflowGoing=0x7fffffab654c, aDamageDirtyArea=0) > at nsBlockFrame.cpp:2610 > #63 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x2065908, > [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262 > #64 0x000000000068254a in nsBlockFrame::Reflow (this=0x2065908, > aPresContext=0x1da5d50, [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED]) > at nsBlockFrame.cpp:902 > #65 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock ( > this=0x7fffffab6be0, aSpace=<value optimized out>, > aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], > aClearance=<value optimized out>, > aIsAdjacentWithTop=<value optimized out>, > [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605 > #66 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x20643d0, > [EMAIL PROTECTED], aLine={mCurrent = 0x20c15d8}, > aKeepReflowGoing=0x7fffffab6f3c) at nsBlockFrame.cpp:3449 > #67 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x20643d0, > [EMAIL PROTECTED], aLine={mCurrent = 0x20c15d8}, > aKeepReflowGoing=0x7fffffab6f3c, aDamageDirtyArea=0) > at nsBlockFrame.cpp:2610 > #68 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x20643d0, > [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262 > #69 0x000000000068254a in nsBlockFrame::Reflow (this=0x20643d0, > aPresContext=0x1da5d50, [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED]) > at nsBlockFrame.cpp:902 > #70 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock ( > this=0x7fffffab75d0, aSpace=<value optimized out>, > aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], > aClearance=<value optimized out>, > aIsAdjacentWithTop=<value optimized out>, > [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605 > #71 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x1fda648, > [EMAIL PROTECTED], aLine={mCurrent = 0x20c16f0}, > aKeepReflowGoing=0x7fffffab792c) at nsBlockFrame.cpp:3449 > #72 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x1fda648, > [EMAIL PROTECTED], aLine={mCurrent = 0x20c16f0}, > aKeepReflowGoing=0x7fffffab792c, aDamageDirtyArea=0) > at nsBlockFrame.cpp:2610 > #73 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x1fda648, > [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262 > #74 0x000000000068254a in nsBlockFrame::Reflow (this=0x1fda648, > aPresContext=0x1da5d50, [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED]) > at nsBlockFrame.cpp:902 > #75 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock ( > this=0x7fffffab7f90, aSpace=<value optimized out>, > aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], > aClearance=<value optimized out>, > aIsAdjacentWithTop=<value optimized out>, [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED]) > at nsBlockReflowContext.cpp:605 > #76 0x000000000067cb23 in nsBlockFrame::ReflowFloat (this=0x1fda2d8, > [EMAIL PROTECTED], aPlaceholder=0x1fda6d8, aFloatCache=0x17b6650, > [EMAIL PROTECTED]) at nsBlockFrame.cpp:5924 > #77 0x0000000000684696 in nsBlockReflowState::FlowAndPlaceFloat ( > this=0x7fffffab8920, aFloatCache=0x17b6650, aIsLeftFloat=0x7fffffab8274, > [EMAIL PROTECTED], aForceFit=1) at nsBlockReflowState.cpp:922 > #78 0x0000000000684d5d in nsBlockReflowState::AddFloat (this=0x7fffffab8920, > [EMAIL PROTECTED], aPlaceholder=0x1fda6d8, > aInitialReflow=<value optimized out>, [EMAIL PROTECTED]) > at nsBlockReflowState.cpp:626 > #79 0x00000000006b1699 in nsLineLayout::ReflowFrame (this=0x7fffffab85d0, > aFrame=0x1fda6d8, [EMAIL PROTECTED], aMetrics=0x0, > [EMAIL PROTECTED]) at nsLineLayout.h:260 > #80 0x0000000000680262 in nsBlockFrame::ReflowInlineFrame (this=0x1fda2d8, > [EMAIL PROTECTED], [EMAIL PROTECTED], aLine= > {mCurrent = 0x20d9f30}, aFrame=0x1fda6d8, > aLineReflowStatus=0x7fffffab8577 "") at nsBlockFrame.cpp:4013 > #81 0x0000000000680893 in nsBlockFrame::DoReflowInlineFrames (this=0x1fda2d8, > [EMAIL PROTECTED], [EMAIL PROTECTED], aLine= > {mCurrent = 0x20d9f30}, aKeepReflowGoing=0x7fffffab887c, > aLineReflowStatus=0x7fffffab86bf "\002", aUpdateMaximumWidth=0, > aDamageDirtyArea=0) at nsBlockFrame.cpp:3852 > #82 0x0000000000680b5a in nsBlockFrame::ReflowInlineFrames (this=0x1fda2d8, > [EMAIL PROTECTED], aLine={mCurrent = 0x20d9f30}, > aKeepReflowGoing=0x7fffffab887c, aDamageDirtyArea=0, > aUpdateMaximumWidth=0) > at nsBlockFrame.cpp:3734 > #83 0x0000000000680da7 in nsBlockFrame::ReflowLine (this=0x1c9c960, > [EMAIL PROTECTED], aLine={mCurrent = 0x20d9f30}, > aKeepReflowGoing=0x7fffffab887c, aDamageDirtyArea=0) > at nsBlockFrame.cpp:2728 > #84 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x1fda2d8, > [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262 > #85 0x000000000068254a in nsBlockFrame::Reflow (this=0x1fda2d8, > aPresContext=0x1da5d50, [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED]) > at nsBlockFrame.cpp:902 > #86 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock ( > this=0x7fffffab8f10, aSpace=<value optimized out>, > aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], > aClearance=<value optimized out>, > aIsAdjacentWithTop=<value optimized out>, > [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605 > #87 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x1fd99c0, > [EMAIL PROTECTED], aLine={mCurrent = 0x20da130}, > aKeepReflowGoing=0x7fffffab926c) at nsBlockFrame.cpp:3449 > #88 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x1fd99c0, > [EMAIL PROTECTED], aLine={mCurrent = 0x20da130}, > aKeepReflowGoing=0x7fffffab926c, aDamageDirtyArea=1) > at nsBlockFrame.cpp:2610 > #89 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x1fd99c0, > [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262 > #90 0x000000000068254a in nsBlockFrame::Reflow (this=0x1fd99c0, > aPresContext=0x1da5d50, [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED]) > at nsBlockFrame.cpp:902 > #91 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock ( > this=0x7fffffab9900, aSpace=<value optimized out>, > aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], > aClearance=<value optimized out>, > aIsAdjacentWithTop=<value optimized out>, > [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605 > #92 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x1fd1c40, > [EMAIL PROTECTED], aLine={mCurrent = 0x1fd9a80}, > aKeepReflowGoing=0x7fffffab9c5c) at nsBlockFrame.cpp:3449 > #93 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x1fd1c40, > [EMAIL PROTECTED], aLine={mCurrent = 0x1fd9a80}, > aKeepReflowGoing=0x7fffffab9c5c, aDamageDirtyArea=1) > at nsBlockFrame.cpp:2610 > #94 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x1fd1c40, > [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262 > #95 0x000000000068254a in nsBlockFrame::Reflow (this=0x1fd1c40, > aPresContext=0x1da5d50, [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED]) > at nsBlockFrame.cpp:902 > #96 0x0000000000689a89 in nsContainerFrame::ReflowChild ( > this=<value optimized out>, aKidFrame=0x1fd1c40, aPresContext=0x1da5d50, > [EMAIL PROTECTED], [EMAIL PROTECTED], aX=0, > aY=36858560, aFlags=0, [EMAIL PROTECTED]) at nsContainerFrame.cpp:905 > #97 0x00000000006a081b in CanvasFrame::Reflow (this=0x1e8f748, > aPresContext=0x1da5d50, [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED]) > at nsHTMLFrame.cpp:531 > #98 0x0000000000689a89 in nsContainerFrame::ReflowChild ( > this=<value optimized out>, aKidFrame=0x1e8f748, aPresContext=0x1da5d50, > [EMAIL PROTECTED], [EMAIL PROTECTED], aX=0, > aY=36858560, aFlags=1, [EMAIL PROTECTED]) at nsContainerFrame.cpp:905 > #99 0x000000000069bb05 in nsHTMLScrollFrame::ReflowScrolledFrame ( > this=0x1e8f990, [EMAIL PROTECTED], > aAssumeHScroll=<value optimized out>, > aAssumeVScroll=<value optimized out>, aMetrics=0x7fffffaba480, > aFirstPass=<value optimized out>) at nsGfxScrollFrame.cpp:515 > #100 0x000000000069bd2e in nsHTMLScrollFrame::ReflowContents (this=0x1e8f990, > aState=0x7fffffab0710, [EMAIL PROTECTED]) > at nsGfxScrollFrame.cpp:570 > #101 0x000000000069d8d8 in nsHTMLScrollFrame::Reflow (this=0x1e8f990, > aPresContext=<value optimized out>, [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED]) > at nsGfxScrollFrame.cpp:768 > #102 0x0000000000689a89 in nsContainerFrame::ReflowChild ( > this=<value optimized out>, aKidFrame=0x1e8f990, aPresContext=0x1da5d50, > [EMAIL PROTECTED], [EMAIL PROTECTED], aX=0, > aY=36858560, aFlags=0, [EMAIL PROTECTED]) at nsContainerFrame.cpp:905 > #103 0x00000000006dbfb8 in ViewportFrame::Reflow (this=0x1e8f648, > aPresContext=0x1da5d50, [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED]) > at nsViewportFrame.cpp:239 > #104 0x0000000000668257 in IncrementalReflow::Dispatch (this=0x7fffffababd0, > aPresContext=0x1da5d50, [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED]) at nsPresShell.cpp:906 > #105 0x000000000066d953 in PresShell::ProcessReflowCommands (this=0x1e8e200, > aInterruptible=1) at nsPresShell.cpp:6873 > #106 0x000000000066dac7 in HandlePLEvent (aEvent=<value optimized out>) > at nsPresShell.cpp:6702 > #107 0x00002b17ec0e0189 in PL_HandleEvent (self=0x1f22710) at plevent.c:688 > #108 0x00002b17ec0e0928 in PL_ProcessPendingEvents (self=0x139ec10) > at plevent.c:623 > #109 0x00002b17ec0e1c4b in nsEventQueueImpl::ProcessPendingEvents ( > this=0x1383910) at nsEventQueue.cpp:417 > #110 0x000000000062bbd2 in event_processor_callback ( > source=<value optimized out>, condition=4289398544, > data=0xfffffffffdd98690) at nsAppShell.cpp:67 > #111 0x00002b17edfffadd in g_main_context_dispatch () > from /usr/lib/libglib-2.0.so.0 > #112 0x00002b17ee002da5 in g_main_context_check () > from /usr/lib/libglib-2.0.so.0 > #113 0x00002b17ee00306a in g_main_loop_run () from /usr/lib/libglib-2.0.so.0 > #114 0x00002b17ec8d3082 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0 > #115 0x000000000062c000 in nsAppShell::Run (this=0x140e2c0) > at nsAppShell.cpp:139 > #116 0x0000000000b9c24e in nsAppStartup::Run (this=0x140e240) > at nsAppStartup.cpp:150 > #117 0x0000000000442033 in XRE_main (argc=<value optimized out>, > argv=<value optimized out>, aAppData=<value optimized out>) > #118 0x00002b17ef38c4ca in __libc_start_main () from /lib/libc.so.6 > #119 0x000000000043d9aa in _start () at ../sysdeps/x86_64/elf/start.S:113 > > So it looks like a problem in libcairo2 (1.0.4-2)? > I narrowed down the problem to this (non-compliant) HTML code: > > <html><body style="font: x-small sans-serif;">ệ Very interesting. Thanks for narrowing it down.
It doesn't crash for me, though. It looks like it might be a pango problem. Could you try the usual workaround, with MOZ_DISABLE_PANGO=1? Thanks Justin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]