Bug 152016 – Arial Unicode MS causes Safari to crash

• Status: RESOLVED
• Resolution: MOVED
• Component: Text

[Kevin Muncie]

Created attachment 266941 [details]
html document with all unicode characters set to Arial Unicode MS

We have found that when a, currently undetermined, character is rendered with the font set to Arial Unicode MS in Safari 9.0.1 on OSX 10.11.1 it causes the browser to crash.

We are currently trying to narrow down the character or character range but I am attaching a reduced test cases that features all the unicode characters on a page with the font set to Arial Unicode MS to demonstrate the problem 

The issue can also be seen live at http://kmuncie.com/osxSafariCrasher.html

[Myles C. Maxfield]

Presumably you need to have Arial Unicode MS installed (perhaps from MS Office?)

[Philippe Wittenbergh]

(In reply to comment #1)
> Presumably you need to have Arial Unicode MS installed (perhaps from MS
> Office?)

That font is installed by default on OS X 10.11, and 10.10, and 10.9, and 10.8 and older.

From Font Book:
	Version	Version 1.01x
	Location	/Library/Fonts/Arial Unicode.ttf
	Unique name	Monotype - Arial Unicode MS
	Manufacturer	Agfa Monotype Corporation

And yes, the linked page hangs the tab/window with Safari on 10.11.1

[Myles C. Maxfield]

(In reply to comment #2)
> (In reply to comment #1)
> > Presumably you need to have Arial Unicode MS installed (perhaps from MS
> > Office?)
> 
> That font is installed by default on OS X 10.11, and 10.10, and 10.9, and
> 10.8 and older.
> 
> From Font Book:
> 	Version	Version 1.01x
> 	Location	/Library/Fonts/Arial Unicode.ttf
> 	Unique name	Monotype - Arial Unicode MS
> 	Manufacturer	Agfa Monotype Corporation
> 
> And yes, the linked page hangs the tab/window with Safari on 10.11.1

I've found it doesn't actually hang the tab, it just takes a long time to load.

[Myles C. Maxfield]

I'm not actually getting any crashes.... Can you attach a crashlog from the crash?

Thanks!
Myles

[Kevin Muncie]

Created attachment 266951 [details]
Crash report from Macbook

Here is a crash report from a friends Macbook which occurred with this reduced test case. 

Thanks!

[Kevin Muncie]

I can't comment on what exact kind of crash this is causing, but it is something that we have confirmed on three separate machines, all set to English system language.

[Myles C. Maxfield]

Crashing inside CTLineCreateWithUniCharProvider().

[Myles C. Maxfield]

Because this is a crash inside CoreText (Indic shaping, it looks like), I'm going to make an internal bug report and send it over to that team.

Thanks for the report!! :D

[Kevin Muncie]

Thanks for the quick response! 

So does that mean this is something that will have to be fix in a release of Safari or OSX?

We are trying to determine workarounds for now so any information towards that end or a possible timeline to fix will be helpful in making decisions. Thanks!

[Myles C. Maxfield]

(In reply to comment #9)
> Thanks for the quick response! 
> 
> So does that mean this is something that will have to be fix in a release of
> Safari or OSX?
> 
> We are trying to determine workarounds for now so any information towards
> that end or a possible timeline to fix will be helpful in making decisions.
> Thanks!

This is something that can't be fixed in either Safari or WebKit. CoreText is an OS X system framework.

Unfortunately, I don't think I can give much more information than that; Apple doesn't comment on future releases :X

Because I can't manage to reproduce the crash, I can't create a reduced test case; if you're interested in workarounds, try to find the smallest possible case which reproduces the crash. Maybe with that information we can come up with a workaround :)

[Myles C. Maxfield]

<rdar://problem/23812928>

[Kevin Muncie]

(In reply to comment #10)
> (In reply to comment #9)
> > Thanks for the quick response! 
> > 
> > So does that mean this is something that will have to be fix in a release of
> > Safari or OSX?
> > 
> > We are trying to determine workarounds for now so any information towards
> > that end or a possible timeline to fix will be helpful in making decisions.
> > Thanks!
> 
> This is something that can't be fixed in either Safari or WebKit. CoreText
> is an OS X system framework.
> 
> Unfortunately, I don't think I can give much more information than that;
> Apple doesn't comment on future releases :X
> 
> Because I can't manage to reproduce the crash, I can't create a reduced test
> case; if you're interested in workarounds, try to find the smallest possible
> case which reproduces the crash. Maybe with that information we can come up
> with a workaround :)

Yes, understandable.

Thats exactly what we are trying to do, taking chunks of the characters and trying to narrow down the ones that cause an issue. Will report back here if we find out more. Thanks!

[Jon Lee]

Does this still reproduce with the latest 10.11.2 release?

[Kevin Muncie]

Created attachment 267093 [details]
Reduced test case with Odia language characters

We have not tested on 10.11.2 yet

I wanted to attach another reduced test case that might help to narrow down the problem. We have found that the Odia language characters cause the crash to occur when the font is set to Arial Unicode MS. I am attaching this test case, any one of the characters included will, on their own, cause the crash. 

Thanks

[Philippe Wittenbergh]

I tried both test cases on Safari 9.0.2 - OS X 10.11.2: neither did crash (the large one which cause the tab to hang previously loaded fairly fast now).

[Brent Fulgham]

The fix for this issue was needed outside the WebKit project, therefore this is being resolved as 'Moved'.

This should now be fixed in shipping software.