Bug 152016 - Arial Unicode MS causes Safari to crash
Summary: Arial Unicode MS causes Safari to crash
Status: RESOLVED MOVED
Alias: None
Product: WebKit
Classification: Unclassified
Component: Text (show other bugs)
Version: Safari 9
Hardware: Mac OS X 10.11
: P2 Major
Assignee: Nobody
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2015-12-08 14:26 PST by Kevin Muncie
Modified: 2022-02-10 19:42 PST (History)
7 users (show)

See Also:


Attachments
html document with all unicode characters set to Arial Unicode MS (500.78 KB, text/html)
2015-12-08 14:26 PST, Kevin Muncie
no flags Details
Crash report from Macbook (77.88 KB, text/plain)
2015-12-08 16:15 PST, Kevin Muncie
no flags Details
Reduced test case with Odia language characters (286 bytes, text/html)
2015-12-10 05:20 PST, Kevin Muncie
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Kevin Muncie 2015-12-08 14:26:20 PST
Created attachment 266941 [details]
html document with all unicode characters set to Arial Unicode MS

We have found that when a, currently undetermined, character is rendered with the font set to Arial Unicode MS in Safari 9.0.1 on OSX 10.11.1 it causes the browser to crash.

We are currently trying to narrow down the character or character range but I am attaching a reduced test cases that features all the unicode characters on a page with the font set to Arial Unicode MS to demonstrate the problem 

The issue can also be seen live at http://kmuncie.com/osxSafariCrasher.html
Comment 1 Myles C. Maxfield 2015-12-08 15:20:32 PST
Presumably you need to have Arial Unicode MS installed (perhaps from MS Office?)
Comment 2 Philippe Wittenbergh 2015-12-08 15:41:27 PST
(In reply to comment #1)
> Presumably you need to have Arial Unicode MS installed (perhaps from MS
> Office?)

That font is installed by default on OS X 10.11, and 10.10, and 10.9, and 10.8 and older.

From Font Book:
	Version	Version 1.01x
	Location	/Library/Fonts/Arial Unicode.ttf
	Unique name	Monotype - Arial Unicode MS
	Manufacturer	Agfa Monotype Corporation

And yes, the linked page hangs the tab/window with Safari on 10.11.1
Comment 3 Myles C. Maxfield 2015-12-08 15:57:52 PST
(In reply to comment #2)
> (In reply to comment #1)
> > Presumably you need to have Arial Unicode MS installed (perhaps from MS
> > Office?)
> 
> That font is installed by default on OS X 10.11, and 10.10, and 10.9, and
> 10.8 and older.
> 
> From Font Book:
> 	Version	Version 1.01x
> 	Location	/Library/Fonts/Arial Unicode.ttf
> 	Unique name	Monotype - Arial Unicode MS
> 	Manufacturer	Agfa Monotype Corporation
> 
> And yes, the linked page hangs the tab/window with Safari on 10.11.1

I've found it doesn't actually hang the tab, it just takes a long time to load.
Comment 4 Myles C. Maxfield 2015-12-08 16:02:40 PST
I'm not actually getting any crashes.... Can you attach a crashlog from the crash?

Thanks!
Myles
Comment 5 Kevin Muncie 2015-12-08 16:15:15 PST
Created attachment 266951 [details]
Crash report from Macbook

Here is a crash report from a friends Macbook which occurred with this reduced test case. 

Thanks!
Comment 6 Kevin Muncie 2015-12-08 16:17:18 PST
I can't comment on what exact kind of crash this is causing, but it is something that we have confirmed on three separate machines, all set to English system language.
Comment 7 Myles C. Maxfield 2015-12-08 16:24:32 PST
Crashing inside CTLineCreateWithUniCharProvider().
Comment 8 Myles C. Maxfield 2015-12-08 16:25:55 PST
Because this is a crash inside CoreText (Indic shaping, it looks like), I'm going to make an internal bug report and send it over to that team.

Thanks for the report!! :D
Comment 9 Kevin Muncie 2015-12-08 16:28:16 PST
Thanks for the quick response! 

So does that mean this is something that will have to be fix in a release of Safari or OSX?

We are trying to determine workarounds for now so any information towards that end or a possible timeline to fix will be helpful in making decisions. Thanks!
Comment 10 Myles C. Maxfield 2015-12-08 16:39:58 PST
(In reply to comment #9)
> Thanks for the quick response! 
> 
> So does that mean this is something that will have to be fix in a release of
> Safari or OSX?
> 
> We are trying to determine workarounds for now so any information towards
> that end or a possible timeline to fix will be helpful in making decisions.
> Thanks!

This is something that can't be fixed in either Safari or WebKit. CoreText is an OS X system framework.

Unfortunately, I don't think I can give much more information than that; Apple doesn't comment on future releases :X

Because I can't manage to reproduce the crash, I can't create a reduced test case; if you're interested in workarounds, try to find the smallest possible case which reproduces the crash. Maybe with that information we can come up with a workaround :)
Comment 11 Myles C. Maxfield 2015-12-08 16:40:44 PST
<rdar://problem/23812928>
Comment 12 Kevin Muncie 2015-12-08 16:41:58 PST
(In reply to comment #10)
> (In reply to comment #9)
> > Thanks for the quick response! 
> > 
> > So does that mean this is something that will have to be fix in a release of
> > Safari or OSX?
> > 
> > We are trying to determine workarounds for now so any information towards
> > that end or a possible timeline to fix will be helpful in making decisions.
> > Thanks!
> 
> This is something that can't be fixed in either Safari or WebKit. CoreText
> is an OS X system framework.
> 
> Unfortunately, I don't think I can give much more information than that;
> Apple doesn't comment on future releases :X
> 
> Because I can't manage to reproduce the crash, I can't create a reduced test
> case; if you're interested in workarounds, try to find the smallest possible
> case which reproduces the crash. Maybe with that information we can come up
> with a workaround :)

Yes, understandable.

Thats exactly what we are trying to do, taking chunks of the characters and trying to narrow down the ones that cause an issue. Will report back here if we find out more. Thanks!
Comment 13 Jon Lee 2015-12-09 00:31:08 PST
Does this still reproduce with the latest 10.11.2 release?
Comment 14 Kevin Muncie 2015-12-10 05:20:37 PST
Created attachment 267093 [details]
Reduced test case with Odia language characters

We have not tested on 10.11.2 yet

I wanted to attach another reduced test case that might help to narrow down the problem. We have found that the Odia language characters cause the crash to occur when the font is set to Arial Unicode MS. I am attaching this test case, any one of the characters included will, on their own, cause the crash. 

Thanks
Comment 15 Philippe Wittenbergh 2015-12-10 19:23:21 PST
I tried both test cases on Safari 9.0.2 - OS X 10.11.2: neither did crash (the large one which cause the tab to hang previously loaded fairly fast now).
Comment 16 Brent Fulgham 2022-02-10 19:42:17 PST
The fix for this issue was needed outside the WebKit project, therefore this is being resolved as 'Moved'.

This should now be fixed in shipping software.