On Mon, May 01, 2006 at 02:50:08PM +0200, Oskar Liljeblad wrote:
> Package: mozilla-firefox
> Version: 1.5.dfsg+1.5.0.2-3
> Severity: normal
> 
> With ttf-dejavu (2.4.1-1) install, Firefox crashes on http://en.wikipedia.org.
> Here's the stack trace:
> 
> #0  0x00002b17eda6f44d in cairo_status_to_string () from 
> /usr/lib/libcairo.so.2
> #1  0x00002b17eda6f7d1 in cairo_status_to_string () from 
> /usr/lib/libcairo.so.2
> #2  0x00002b17eda83589 in cairo_ft_scaled_font_unlock_face ()
>    from /usr/lib/libcairo.so.2
> #3  0x00002b17eda7150e in cairo_scaled_font_glyph_extents ()
>    from /usr/lib/libcairo.so.2
> #4  0x00002b17ecfa906b in pango_cairo_fc_font_get_type ()
>    from /usr/lib/libpangocairo-1.0.so.0
> #5  0x00002b17ee27f590 in pango_ot_buffer_output ()
>    from /usr/lib/libpangoft2-1.0.so.0
> #6  0x00002aaaac5db762 in ?? ()
>    from /usr/lib/pango/1.5.0/modules/pango-basic-fc.so
> #7  0x00002b17ed949107 in pango_shape () from /usr/lib/libpango-1.0.so.0
> #8  0x00002b17ed93d6d4 in pango_layout_line_index_to_x ()
>    from /usr/lib/libpango-1.0.so.0
> #9  0x00002b17ed940208 in pango_layout_iter_get_char_extents ()
>    from /usr/lib/libpango-1.0.so.0
> #10 0x00002b17ed940a28 in pango_layout_iter_get_char_extents ()
>    from /usr/lib/libpango-1.0.so.0
> #11 0x00002b17ed9428f1 in pango_layout_get_line ()
>    from /usr/lib/libpango-1.0.so.0
> #12 0x00000000005d92f6 in nsFontMetricsPango::FixupSpaceWidths (
>     this=0x22ccc40, aLayout=0x1c9c960, 
>     aString=0xfffffffffdd98690 <Address 0xfffffffffdd98690 out of bounds>)
>     at nsFontMetricsPango.cpp:1518
> #13 0x00000000005da73e in nsFontMetricsPango::GetWidth (this=0x22ccc40, 
>     aString=0x1c8daf0 "Ti???ng Vi??\207t (Vietnamese)", aLength=27, 
>     [EMAIL PROTECTED], aContext=<value optimized out>)
>     at nsFontMetricsPango.cpp:469
> #14 0x00000000005d944c in nsFontMetricsPango::GetTextDimensionsInternal (
>     this=0x22ccc40, aString=0x1c8daf0 "Ti???ng Vi??\207t (Vietnamese)", 
>     aLength=27, aAvailWidth=6068, aBreaks=0x23debf0, aNumBreaks=5, 
>     [EMAIL PROTECTED], [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], aContext=0x17b7340)
>     at nsFontMetricsPango.cpp:1442
> #15 0x00000000005d97de in nsFontMetricsPango::GetTextDimensions (
>     this=0x22ccc40, aString=0x7fffffab1374, aLength=23, aAvailWidth=6068, 
>     aBreaks=0x7fffffab100c, aNumBreaks=5, [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED], 
>     aFontID=0x0, aContext=0xfffffffffdd98690) at nsFontMetricsPango.cpp:667
> #16 0x00000000005d0fd1 in nsRenderingContextGTK::GetTextDimensions (
>     this=<value optimized out>, aString=0x7fffffab0710, aLength=-36075888, 
>     aAvailWidth=11, aBreaks=0xffffffffaabe9c74, aNumBreaks=14262, 
>     [EMAIL PROTECTED], [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], aFontID=0x2326ac0)
>     at nsRenderingContextGTK.cpp:1305
> #17 0x00000000006d64ba in nsTextFrame::MeasureText (this=0x20bee78, 
>     aPresContext=0x1da5d50, [EMAIL PROTECTED], [EMAIL PROTECTED], 
>     aLb=0x1f4a9b0, [EMAIL PROTECTED], [EMAIL PROTECTED])
>     at nsTextFrame.cpp:5503
> #18 0x00000000006d8e10 in nsTextFrame::Reflow (this=0x20bee78, 
>     aPresContext=0x1da5d50, [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED])
>     at nsTextFrame.cpp:5980
> #19 0x00000000006b11ea in nsLineLayout::ReflowFrame (this=0x7fffffab1d10, 
>     aFrame=0x20bee78, [EMAIL PROTECTED], aMetrics=0x0, 
>     [EMAIL PROTECTED]) at nsLineLayout.cpp:995
> #20 0x00000000006ab6e3 in nsInlineFrame::ReflowInlineFrame (this=0x20bee20, 
>     aPresContext=0x1da5d50, aReflowState=<value optimized out>, 
>     [EMAIL PROTECTED], aFrame=0x20bee78, [EMAIL PROTECTED])
>     at nsInlineFrame.cpp:684
> #21 0x00000000006ab9ab in nsInlineFrame::ReflowFrames (this=0x20bee20, 
>     aPresContext=0x1da5d50, [EMAIL PROTECTED], [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED]) at nsInlineFrame.cpp:519
> #22 0x00000000006abdf9 in nsInlineFrame::Reflow (this=0x20bee20, 
>     aPresContext=0x1da5d50, [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED])
>     at nsInlineFrame.cpp:429
> #23 0x00000000006b11ea in nsLineLayout::ReflowFrame (this=0x7fffffab1d10, 
>     aFrame=0x20bee20, [EMAIL PROTECTED], aMetrics=0x0, 
>     [EMAIL PROTECTED]) at nsLineLayout.cpp:995
> #24 0x0000000000680262 in nsBlockFrame::ReflowInlineFrame (this=0x20bb5c8, 
>     [EMAIL PROTECTED], [EMAIL PROTECTED], aLine=
>       {mCurrent = 0x23d91f0}, aFrame=0x20bee20, 
>     aLineReflowStatus=0x7fffffab1cb7 "") at nsBlockFrame.cpp:4013
> #25 0x0000000000680893 in nsBlockFrame::DoReflowInlineFrames (this=0x20bb5c8, 
>     [EMAIL PROTECTED], [EMAIL PROTECTED], aLine=
>       {mCurrent = 0x23d91f0}, aKeepReflowGoing=0x7fffffab1fbc, 
>     aLineReflowStatus=0x7fffffab1dff "\002", aUpdateMaximumWidth=0, 
>     aDamageDirtyArea=0) at nsBlockFrame.cpp:3852
> #26 0x0000000000680b5a in nsBlockFrame::ReflowInlineFrames (this=0x20bb5c8, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x23d91f0}, 
>     aKeepReflowGoing=0x7fffffab1fbc, aDamageDirtyArea=0, 
> aUpdateMaximumWidth=0)
>     at nsBlockFrame.cpp:3734
> #27 0x0000000000680da7 in nsBlockFrame::ReflowLine (this=0x1c9c960, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x23d91f0}, 
>     aKeepReflowGoing=0x7fffffab1fbc, aDamageDirtyArea=0)
>     at nsBlockFrame.cpp:2728
> #28 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x20bb5c8, 
>     [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262
> #29 0x000000000068254a in nsBlockFrame::Reflow (this=0x20bb5c8, 
>     aPresContext=0x1da5d50, [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED])
>     at nsBlockFrame.cpp:902
> #30 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock (
>     this=0x7fffffab2650, aSpace=<value optimized out>, 
>     aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], 
>     aClearance=<value optimized out>, 
>     aIsAdjacentWithTop=<value optimized out>, 
>     [EMAIL PROTECTED], [EMAIL PROTECTED], 
>     [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605
> #31 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x20bb340, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20bf3b8}, 
>     aKeepReflowGoing=0x7fffffab29ac) at nsBlockFrame.cpp:3449
> #32 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x20bb340, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20bf3b8}, 
>     aKeepReflowGoing=0x7fffffab29ac, aDamageDirtyArea=0)
>     at nsBlockFrame.cpp:2610
> #33 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x20bb340, 
>     [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262
> #34 0x000000000068254a in nsBlockFrame::Reflow (this=0x20bb340, 
>     aPresContext=0x1da5d50, [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED])
>     at nsBlockFrame.cpp:902
> #35 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock (
>     this=0x7fffffab3040, aSpace=<value optimized out>, 
>     aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], 
>     aClearance=<value optimized out>, 
>     aIsAdjacentWithTop=<value optimized out>, 
>     [EMAIL PROTECTED], [EMAIL PROTECTED], 
>     [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605
> #36 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x20bb128, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20bff28}, 
>     aKeepReflowGoing=0x7fffffab339c) at nsBlockFrame.cpp:3449
> #37 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x20bb128, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20bff28}, 
>     aKeepReflowGoing=0x7fffffab339c, aDamageDirtyArea=0)
>     at nsBlockFrame.cpp:2610
> #38 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x20bb128, 
>     [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262
> #39 0x000000000068254a in nsBlockFrame::Reflow (this=0x20bb128, 
>     aPresContext=0x1da5d50, [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED])
>     at nsBlockFrame.cpp:902
> #40 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock (
>     this=0x7fffffab3a30, aSpace=<value optimized out>, 
>     aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], 
>     aClearance=<value optimized out>, 
>     aIsAdjacentWithTop=<value optimized out>, 
>     [EMAIL PROTECTED], [EMAIL PROTECTED], 
>     [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605
> #41 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x20baf10, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20c00c0}, 
>     aKeepReflowGoing=0x7fffffab3d8c) at nsBlockFrame.cpp:3449
> #42 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x20baf10, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20c00c0}, 
>     aKeepReflowGoing=0x7fffffab3d8c, aDamageDirtyArea=0)
>     at nsBlockFrame.cpp:2610
> #43 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x20baf10, 
>     [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262
> #44 0x000000000068254a in nsBlockFrame::Reflow (this=0x20baf10, 
>     aPresContext=0x1da5d50, [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED])
>     at nsBlockFrame.cpp:902
> #45 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock (
>     this=0x7fffffab4420, aSpace=<value optimized out>, 
>     aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], 
>     aClearance=<value optimized out>, 
>     aIsAdjacentWithTop=<value optimized out>, 
>     [EMAIL PROTECTED], [EMAIL PROTECTED], 
>     [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605
> #46 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x20b60d8, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20c0258}, 
>     aKeepReflowGoing=0x7fffffab477c) at nsBlockFrame.cpp:3449
> #47 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x20b60d8, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20c0258}, 
>     aKeepReflowGoing=0x7fffffab477c, aDamageDirtyArea=0)
>     at nsBlockFrame.cpp:2610
> #48 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x20b60d8, 
>     [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262
> #49 0x000000000068254a in nsBlockFrame::Reflow (this=0x20b60d8, 
>     aPresContext=0x1da5d50, [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED])
>     at nsBlockFrame.cpp:902
> #50 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock (
>     this=0x7fffffab4e10, aSpace=<value optimized out>, 
>     aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], 
>     aClearance=<value optimized out>, 
>     aIsAdjacentWithTop=<value optimized out>, 
>     [EMAIL PROTECTED], [EMAIL PROTECTED], 
>     [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605
> #51 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x20b4830, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20c03f0}, 
>     aKeepReflowGoing=0x7fffffab516c) at nsBlockFrame.cpp:3449
> #52 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x20b4830, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20c03f0}, 
>     aKeepReflowGoing=0x7fffffab516c, aDamageDirtyArea=0)
>     at nsBlockFrame.cpp:2610
> #53 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x20b4830, 
>     [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262
> #54 0x000000000068254a in nsBlockFrame::Reflow (this=0x20b4830, 
>     aPresContext=0x1da5d50, [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED])
>     at nsBlockFrame.cpp:902
> #55 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock (
>     this=0x7fffffab5800, aSpace=<value optimized out>, 
>     aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], 
>     aClearance=<value optimized out>, 
>     aIsAdjacentWithTop=<value optimized out>, 
>     [EMAIL PROTECTED], [EMAIL PROTECTED], 
>     [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605
> #56 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x20b3ed0, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20c06e0}, 
>     aKeepReflowGoing=0x7fffffab5b5c) at nsBlockFrame.cpp:3449
> #57 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x20b3ed0, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20c06e0}, 
>     aKeepReflowGoing=0x7fffffab5b5c, aDamageDirtyArea=0)
>     at nsBlockFrame.cpp:2610
> #58 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x20b3ed0, 
>     [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262
> #59 0x000000000068254a in nsBlockFrame::Reflow (this=0x20b3ed0, 
>     aPresContext=0x1da5d50, [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED])
>     at nsBlockFrame.cpp:902
> #60 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock (
>     this=0x7fffffab61f0, aSpace=<value optimized out>, 
>     aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], 
>     aClearance=<value optimized out>, 
>     aIsAdjacentWithTop=<value optimized out>, 
>     [EMAIL PROTECTED], [EMAIL PROTECTED], 
>     [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605
> #61 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x2065908, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20c13c0}, 
>     aKeepReflowGoing=0x7fffffab654c) at nsBlockFrame.cpp:3449
> #62 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x2065908, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20c13c0}, 
>     aKeepReflowGoing=0x7fffffab654c, aDamageDirtyArea=0)
>     at nsBlockFrame.cpp:2610
> #63 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x2065908, 
>     [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262
> #64 0x000000000068254a in nsBlockFrame::Reflow (this=0x2065908, 
>     aPresContext=0x1da5d50, [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED])
>     at nsBlockFrame.cpp:902
> #65 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock (
>     this=0x7fffffab6be0, aSpace=<value optimized out>, 
>     aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], 
>     aClearance=<value optimized out>, 
>     aIsAdjacentWithTop=<value optimized out>, 
>     [EMAIL PROTECTED], [EMAIL PROTECTED], 
>     [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605
> #66 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x20643d0, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20c15d8}, 
>     aKeepReflowGoing=0x7fffffab6f3c) at nsBlockFrame.cpp:3449
> #67 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x20643d0, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20c15d8}, 
>     aKeepReflowGoing=0x7fffffab6f3c, aDamageDirtyArea=0)
>     at nsBlockFrame.cpp:2610
> #68 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x20643d0, 
>     [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262
> #69 0x000000000068254a in nsBlockFrame::Reflow (this=0x20643d0, 
>     aPresContext=0x1da5d50, [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED])
>     at nsBlockFrame.cpp:902
> #70 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock (
>     this=0x7fffffab75d0, aSpace=<value optimized out>, 
>     aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], 
>     aClearance=<value optimized out>, 
>     aIsAdjacentWithTop=<value optimized out>, 
>     [EMAIL PROTECTED], [EMAIL PROTECTED], 
>     [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605
> #71 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x1fda648, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20c16f0}, 
>     aKeepReflowGoing=0x7fffffab792c) at nsBlockFrame.cpp:3449
> #72 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x1fda648, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20c16f0}, 
>     aKeepReflowGoing=0x7fffffab792c, aDamageDirtyArea=0)
>     at nsBlockFrame.cpp:2610
> #73 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x1fda648, 
>     [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262
> #74 0x000000000068254a in nsBlockFrame::Reflow (this=0x1fda648, 
>     aPresContext=0x1da5d50, [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED])
>     at nsBlockFrame.cpp:902
> #75 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock (
>     this=0x7fffffab7f90, aSpace=<value optimized out>, 
>     aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], 
>     aClearance=<value optimized out>, 
>     aIsAdjacentWithTop=<value optimized out>, [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED])
>     at nsBlockReflowContext.cpp:605
> #76 0x000000000067cb23 in nsBlockFrame::ReflowFloat (this=0x1fda2d8, 
>     [EMAIL PROTECTED], aPlaceholder=0x1fda6d8, aFloatCache=0x17b6650, 
>     [EMAIL PROTECTED]) at nsBlockFrame.cpp:5924
> #77 0x0000000000684696 in nsBlockReflowState::FlowAndPlaceFloat (
>     this=0x7fffffab8920, aFloatCache=0x17b6650, aIsLeftFloat=0x7fffffab8274, 
>     [EMAIL PROTECTED], aForceFit=1) at nsBlockReflowState.cpp:922
> #78 0x0000000000684d5d in nsBlockReflowState::AddFloat (this=0x7fffffab8920, 
>     [EMAIL PROTECTED], aPlaceholder=0x1fda6d8, 
>     aInitialReflow=<value optimized out>, [EMAIL PROTECTED])
>     at nsBlockReflowState.cpp:626
> #79 0x00000000006b1699 in nsLineLayout::ReflowFrame (this=0x7fffffab85d0, 
>     aFrame=0x1fda6d8, [EMAIL PROTECTED], aMetrics=0x0, 
>     [EMAIL PROTECTED]) at nsLineLayout.h:260
> #80 0x0000000000680262 in nsBlockFrame::ReflowInlineFrame (this=0x1fda2d8, 
>     [EMAIL PROTECTED], [EMAIL PROTECTED], aLine=
>       {mCurrent = 0x20d9f30}, aFrame=0x1fda6d8, 
>     aLineReflowStatus=0x7fffffab8577 "") at nsBlockFrame.cpp:4013
> #81 0x0000000000680893 in nsBlockFrame::DoReflowInlineFrames (this=0x1fda2d8, 
>     [EMAIL PROTECTED], [EMAIL PROTECTED], aLine=
>       {mCurrent = 0x20d9f30}, aKeepReflowGoing=0x7fffffab887c, 
>     aLineReflowStatus=0x7fffffab86bf "\002", aUpdateMaximumWidth=0, 
>     aDamageDirtyArea=0) at nsBlockFrame.cpp:3852
> #82 0x0000000000680b5a in nsBlockFrame::ReflowInlineFrames (this=0x1fda2d8, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20d9f30}, 
>     aKeepReflowGoing=0x7fffffab887c, aDamageDirtyArea=0, 
> aUpdateMaximumWidth=0)
>     at nsBlockFrame.cpp:3734
> #83 0x0000000000680da7 in nsBlockFrame::ReflowLine (this=0x1c9c960, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20d9f30}, 
>     aKeepReflowGoing=0x7fffffab887c, aDamageDirtyArea=0)
>     at nsBlockFrame.cpp:2728
> #84 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x1fda2d8, 
>     [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262
> #85 0x000000000068254a in nsBlockFrame::Reflow (this=0x1fda2d8, 
>     aPresContext=0x1da5d50, [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED])
>     at nsBlockFrame.cpp:902
> #86 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock (
>     this=0x7fffffab8f10, aSpace=<value optimized out>, 
>     aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], 
>     aClearance=<value optimized out>, 
>     aIsAdjacentWithTop=<value optimized out>, 
>     [EMAIL PROTECTED], [EMAIL PROTECTED], 
>     [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605
> #87 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x1fd99c0, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20da130}, 
>     aKeepReflowGoing=0x7fffffab926c) at nsBlockFrame.cpp:3449
> #88 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x1fd99c0, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x20da130}, 
>     aKeepReflowGoing=0x7fffffab926c, aDamageDirtyArea=1)
>     at nsBlockFrame.cpp:2610
> #89 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x1fd99c0, 
>     [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262
> #90 0x000000000068254a in nsBlockFrame::Reflow (this=0x1fd99c0, 
>     aPresContext=0x1da5d50, [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED])
>     at nsBlockFrame.cpp:902
> #91 0x0000000000683b28 in nsBlockReflowContext::ReflowBlock (
>     this=0x7fffffab9900, aSpace=<value optimized out>, 
>     aApplyTopMargin=<value optimized out>, [EMAIL PROTECTED], 
>     aClearance=<value optimized out>, 
>     aIsAdjacentWithTop=<value optimized out>, 
>     [EMAIL PROTECTED], [EMAIL PROTECTED], 
>     [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605
> #92 0x000000000067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x1fd1c40, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x1fd9a80}, 
>     aKeepReflowGoing=0x7fffffab9c5c) at nsBlockFrame.cpp:3449
> #93 0x0000000000680c4e in nsBlockFrame::ReflowLine (this=0x1fd1c40, 
>     [EMAIL PROTECTED], aLine={mCurrent = 0x1fd9a80}, 
>     aKeepReflowGoing=0x7fffffab9c5c, aDamageDirtyArea=1)
>     at nsBlockFrame.cpp:2610
> #94 0x0000000000681327 in nsBlockFrame::ReflowDirtyLines (this=0x1fd1c40, 
>     [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262
> #95 0x000000000068254a in nsBlockFrame::Reflow (this=0x1fd1c40, 
>     aPresContext=0x1da5d50, [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED])
>     at nsBlockFrame.cpp:902
> #96 0x0000000000689a89 in nsContainerFrame::ReflowChild (
>     this=<value optimized out>, aKidFrame=0x1fd1c40, aPresContext=0x1da5d50, 
>     [EMAIL PROTECTED], [EMAIL PROTECTED], aX=0, 
>     aY=36858560, aFlags=0, [EMAIL PROTECTED]) at nsContainerFrame.cpp:905
> #97 0x00000000006a081b in CanvasFrame::Reflow (this=0x1e8f748, 
>     aPresContext=0x1da5d50, [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED])
>     at nsHTMLFrame.cpp:531
> #98 0x0000000000689a89 in nsContainerFrame::ReflowChild (
>     this=<value optimized out>, aKidFrame=0x1e8f748, aPresContext=0x1da5d50, 
>     [EMAIL PROTECTED], [EMAIL PROTECTED], aX=0, 
>     aY=36858560, aFlags=1, [EMAIL PROTECTED]) at nsContainerFrame.cpp:905
> #99 0x000000000069bb05 in nsHTMLScrollFrame::ReflowScrolledFrame (
>     this=0x1e8f990, [EMAIL PROTECTED], 
>     aAssumeHScroll=<value optimized out>, 
>     aAssumeVScroll=<value optimized out>, aMetrics=0x7fffffaba480, 
>     aFirstPass=<value optimized out>) at nsGfxScrollFrame.cpp:515
> #100 0x000000000069bd2e in nsHTMLScrollFrame::ReflowContents (this=0x1e8f990, 
>     aState=0x7fffffab0710, [EMAIL PROTECTED])
>     at nsGfxScrollFrame.cpp:570
> #101 0x000000000069d8d8 in nsHTMLScrollFrame::Reflow (this=0x1e8f990, 
>     aPresContext=<value optimized out>, [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED])
>     at nsGfxScrollFrame.cpp:768
> #102 0x0000000000689a89 in nsContainerFrame::ReflowChild (
>     this=<value optimized out>, aKidFrame=0x1e8f990, aPresContext=0x1da5d50, 
>     [EMAIL PROTECTED], [EMAIL PROTECTED], aX=0, 
>     aY=36858560, aFlags=0, [EMAIL PROTECTED]) at nsContainerFrame.cpp:905
> #103 0x00000000006dbfb8 in ViewportFrame::Reflow (this=0x1e8f648, 
>     aPresContext=0x1da5d50, [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED])
>     at nsViewportFrame.cpp:239
> #104 0x0000000000668257 in IncrementalReflow::Dispatch (this=0x7fffffababd0, 
>     aPresContext=0x1da5d50, [EMAIL PROTECTED], 
>     [EMAIL PROTECTED], [EMAIL PROTECTED]) at nsPresShell.cpp:906
> #105 0x000000000066d953 in PresShell::ProcessReflowCommands (this=0x1e8e200, 
>     aInterruptible=1) at nsPresShell.cpp:6873
> #106 0x000000000066dac7 in HandlePLEvent (aEvent=<value optimized out>)
>     at nsPresShell.cpp:6702
> #107 0x00002b17ec0e0189 in PL_HandleEvent (self=0x1f22710) at plevent.c:688
> #108 0x00002b17ec0e0928 in PL_ProcessPendingEvents (self=0x139ec10)
>     at plevent.c:623
> #109 0x00002b17ec0e1c4b in nsEventQueueImpl::ProcessPendingEvents (
>     this=0x1383910) at nsEventQueue.cpp:417
> #110 0x000000000062bbd2 in event_processor_callback (
>     source=<value optimized out>, condition=4289398544, 
>     data=0xfffffffffdd98690) at nsAppShell.cpp:67
> #111 0x00002b17edfffadd in g_main_context_dispatch ()
>    from /usr/lib/libglib-2.0.so.0
> #112 0x00002b17ee002da5 in g_main_context_check ()
>    from /usr/lib/libglib-2.0.so.0
> #113 0x00002b17ee00306a in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
> #114 0x00002b17ec8d3082 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
> #115 0x000000000062c000 in nsAppShell::Run (this=0x140e2c0)
>     at nsAppShell.cpp:139
> #116 0x0000000000b9c24e in nsAppStartup::Run (this=0x140e240)
>     at nsAppStartup.cpp:150
> #117 0x0000000000442033 in XRE_main (argc=<value optimized out>, 
>     argv=<value optimized out>, aAppData=<value optimized out>)
> #118 0x00002b17ef38c4ca in __libc_start_main () from /lib/libc.so.6
> #119 0x000000000043d9aa in _start () at ../sysdeps/x86_64/elf/start.S:113
> 
> So it looks like a problem in libcairo2 (1.0.4-2)?
> I narrowed down the problem to this (non-compliant) HTML code:
> 
> <html><body style="font: x-small sans-serif;">&#7879;
Very interesting.  Thanks for narrowing it down.

It doesn't crash for me, though.  It looks like it might be a pango
problem.  Could you try the usual workaround, with
MOZ_DISABLE_PANGO=1?

Thanks
Justin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to