Bug 23516

Summary: Downloadable font causes crash
Product: WebKit Reporter: Philip Taylor <excors>
Component: TextAssignee: Nobody <webkit-unassigned>
Status: RESOLVED WORKSFORME    
Severity: Normal CC: ap, jdaggett, mitz, yusukes
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: PC   
OS: OS X 10.5   
URL: http://philip.html5.org/tests/font/atsui-kern-crash.html
Attachments:
Description Flags
crash report none

Philip Taylor
Reported 2009-01-24 03:38:13 PST
Steps to reproduce: 1) Start a new instance of WebKit on OS X. 2) Open http://philip.html5.org/tests/font/atsui-kern-crash.html Expected result: A page with some text and a sort of underlined 'i'. Actual result: Frequently (but not perfectly reproducibly) a crash. See attached crash report. The page uses @font-face to download a font (a heavily modified version of Doulos SIL), which is used to render an 'i' followed by COMBINING MACRON BELOW. The crash is seemingly somewhere in ATSUI while it's doing ProcessKerningRun. I've no idea if it's possibly a security issue. It affects other ATSUI users, including Opera and Firefox, but apparently the Firefox developers were told by Apple (in the context of a different crash bug) that they should be using Core Text instead of ATSUI and so the underlying ATSUI bugs wouldn't be fixed. In any case, this bug causes WebKit to crash and so it should be fixed on some layer.
Attachments
crash report (28.15 KB, text/plain)
2009-01-24 03:38 PST, Philip Taylor 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Philip Taylor
Comment 1 2009-01-24 03:38:57 PST
Created attachment 26995 [details] crash report
Alexey Proskuryakov
Comment 2 2014-10-17 12:22:37 PDT
This page doesn't cause a crash with Safari 7.1 on 10.9.5. I do not know if the underlying ATSUI issue got fixed or not, but it's not an issue for WebKit any more.
Note You need to log in before you can comment on or make changes to this bug.