51466 2010-12-22 05:46:45 -0800 chrome.dll!WebCore::Font::xHeight ReadAV@NULL (15af5145b4290aa1c6bccd7c516491f9) 2014-04-03 14:15:19 -0700 1 1 1 Unclassified WebKit Canvas 528+ (Nightly build) PC Windows Vista RESOLVED INVALID P1 Normal --- 1 skylined webkit-unassigned eric krit mdelaney7 noel.gordon oldest_to_newest 325466 0 77211 skylined 2010-12-22 05:46:45 -0800 Created attachment 77211 Repro http://code.google.com/p/chromium/issues/detail?id=67786 Repro: <script> oContext2d=document.getCSSCanvasContext("2d","",0); oContext2d.font="small-caps 1ex fantasy"; </script> id: chrome.dll!WebCore::Font::xHeight ReadAV@NULL (15af5145b4290aa1c6bccd7c516491f9) description: Attempt to read from unallocated NULL pointer+0x30 in chrome.dll!WebCore::Font::xHeight stack: chrome.dll!WebCore::Font::xHeight chrome.dll!WebCore::CSSPrimitiveValue::computeLengthDouble chrome.dll!WebCore::CSSPrimitiveValue::computeLengthFloat chrome.dll!(unknown) chrome.dll!(unknown) chrome.dll!WebCore::CSSStyleSelector::applyPropertyToStyle chrome.dll!WebCore::CanvasRenderingContext2D::setFont chrome.dll!WebCore::CanvasRenderingContext2DInternal::fontAttrSetter chrome.dll!v8::internal::JSObject::SetPropertyWithCallback chrome.dll!v8::internal::JSObject::SetProperty chrome.dll!v8::internal::JSObject::SetProperty chrome.dll!v8::internal::StoreIC::Store chrome.dll!v8::internal::StoreIC_Miss chrome.dll!v8::internal::Invoke chrome.dll!v8::internal::Execution::Call ... 401124 1 skylined 2011-05-10 04:01:06 -0700 See also bug 57756 475208 2 noel.gordon 2011-09-28 20:19:50 -0700 Fixed on bug 66291 yes? 77211 2010-12-22 05:46:45 -0800 2010-12-22 05:46:45 -0800 Repro repro.html text/html 117 skylined PHNjcmlwdD4KICBvQ29udGV4dDJkPWRvY3VtZW50LmdldENTU0NhbnZhc0NvbnRleHQoIjJkIiwi IiwwKTsKICBvQ29udGV4dDJkLmZvbnQ9InNtYWxsLWNhcHMgMWV4IGZhbnRhc3kiOwo8L3Njcmlw dD4K