Fw: Re: [ft-devel] fontconfig-2.3.3 causes crash on OpenSUSE 10.2

[ajaxas]

Begin forwarded message:

Date: Sat, 7 Apr 2007 23:06:20 +0700
From: ajaxas <address@hidden>
To: "David Turner" <address@hidden>
Subject: Re: [ft-devel] fontconfig-2.3.3 causes crash on OpenSUSE 10.2


Good evening! (GMT + 7:00)

Now, "that's a quick one" is my line, I though only M.Bunkus was that fast to
respond to a bug report!
Sorry for my late answer, I haven't been at home all the Friday and most of
the Saturday. So, I tried what you suggested and indeed, firefox crash didn't
affect my desktop, whew! 

So here's a GDB log, and thank you for your attention!

===============================================================================
address@hidden:~/soft/test233> LD_LIBRARY_PATH=
$HOME/soft/test233/lib:/usr/lib/firefox:/usr/lib/firefox/plugins gdb
--args /usr/lib/firefox/firefox-bin GNU gdb 6.5 Copyright (C) 2006 Free Software
Foundation, Inc. GDB is free software, covered by the GNU General Public
License, and you are welcome to change it and/or distribute copies of it under
certain conditions. Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i586-suse-linux"...(no debugging symbols found)
Using host libthread_db library "/lib/libthread_db.so.1".

(gdb) r
Starting program: /usr/lib/firefox/firefox-bin 
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[Thread debugging using libthread_db enabled]
[New Thread -1223063856 (LWP 30719)]
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[New Thread -1224688752 (LWP 30722)]
[New Thread -1233130608 (LWP 30723)]
nsImgLikeOpera: QI unknown interface: {9188bc85-f92e-11d2-81ef-0060083a0bcf}
[New Thread -1248081008 (LWP 30724)]
nsImgLikeOpera: QI unknown interface: {986c11d0-f340-11d4-9075-0010a4e73d9a}
[New Thread -1256473712 (LWP 30725)]
[New Thread -1264866416 (LWP 30726)]
[New Thread -1284691056 (LWP 30728)]
[New Thread -1293083760 (LWP 30729)]
[New Thread -1301476464 (LWP 30730)]
[Thread -1301476464 (LWP 30730) exited]
[New Thread -1309869168 (LWP 30731)]
[New Thread -1301476464 (LWP 30732)]
[New Thread -1318261872 (LWP 30733)]
[New Thread -1326654576 (LWP 30734)]
[Thread -1326654576 (LWP 30734) exited]
[New Thread -1335047280 (LWP 30735)]
[Thread -1335047280 (LWP 30735) exited]
*** glibc detected *** /usr/lib/firefox/firefox-bin: free(): invalid next size
(fast): 0x093eef58 *** ======= Backtrace: =========
/lib/libc.so.6[0xb72a56e1]
/lib/libc.so.6(cfree+0x89)[0xb72a6d79]
/home/ajaxas/soft/test233/lib/libfreetype.so.6[0xb7803eed]
/home/ajaxas/soft/test233/lib/libfreetype.so.6(ft_mem_free+0x1a)[0xb780776a]
/home/ajaxas/soft/test233/lib/libfreetype.so.6(ft_glyphslot_free_bitmap+0x4c)
[0xb7807c2c] /home/ajaxas/soft/test233/lib/libfreetype.so.6(FT_Load_Glyph+0x40)
[0xb780a7f0] /usr/lib/libcairo.so.2[0xb7962a88]
/usr/lib/libcairo.so.2[0xb79544cd]
/usr/lib/libcairo.so.2(cairo_scaled_font_glyph_extents+0xec)[0xb79551ec]
/opt/gnome/lib/libpangocairo-1.0.so.0[0xb79e2bbd]
/opt/gnome/lib/libpango-1.0.so.0(pango_font_get_glyph_extents+0x3e)[0xb79af26e]
/opt/gnome/lib/libpangoft2-1.0.so.0(pango_ot_buffer_output+0x18a)[0xb75d125a]
/opt/gnome/lib/pango/1.5.0/modules/pango-basic-fc.so[0xb3fe03a9]
/opt/gnome/lib/libpango-1.0.so.0[0xb79b683a]
/opt/gnome/lib/libpango-1.0.so.0(pango_shape+0xf9)[0xb79c6629]
/opt/gnome/lib/libpango-1.0.so.0[0xb79ba33a]
/opt/gnome/lib/libpango-1.0.so.0[0xb79bce45]
/opt/gnome/lib/libpango-1.0.so.0[0xb79bd3a6]
/opt/gnome/lib/libpango-1.0.so.0(pango_layout_get_line+0x35)[0xb79bf325]
/usr/lib/firefox/firefox-bin[0x821ddf3]
/usr/lib/firefox/firefox-bin[0x821e9ee]
/usr/lib/firefox/firefox-bin[0x821d822]
/usr/lib/firefox/firefox-bin[0x821e6c4]
/usr/lib/firefox/firefox-bin[0x8216ce2]
/usr/lib/firefox/firefox-bin[0x87948fd]
/usr/lib/firefox/firefox-bin[0x82e3051]
/usr/lib/firefox/firefox-bin[0x82e7f0e]
/usr/lib/firefox/firefox-bin[0x82caa51]
/usr/lib/firefox/firefox-bin[0x82a20ca]
/usr/lib/firefox/firefox-bin[0x82a2550]
/usr/lib/firefox/firefox-bin[0x82a27a2]
/usr/lib/firefox/firefox-bin[0x82a29b6]
/usr/lib/firefox/firefox-bin[0x82a2efa]
/usr/lib/firefox/firefox-bin[0x82a5921]
/usr/lib/firefox/firefox-bin[0x82a726b]
/usr/lib/firefox/firefox-bin[0x82a1940]
/usr/lib/firefox/firefox-bin[0x82a2867]
/usr/lib/firefox/firefox-bin[0x82a2efa]
/usr/lib/firefox/firefox-bin[0x82a5921]
/usr/lib/firefox/firefox-bin[0x82a726b]
/usr/lib/firefox/firefox-bin[0x82a1940]
/usr/lib/firefox/firefox-bin[0x82a2867]
/usr/lib/firefox/firefox-bin[0x82a2efa]
/usr/lib/firefox/firefox-bin[0x82a5921]
/usr/lib/firefox/firefox-bin[0x82a726b]
/usr/lib/firefox/firefox-bin[0x82a1940]
/usr/lib/firefox/firefox-bin[0x82a2867]
/usr/lib/firefox/firefox-bin[0x82a2efa]
/usr/lib/firefox/firefox-bin[0x82a5921]
/usr/lib/firefox/firefox-bin[0x82a726b]
/usr/lib/firefox/firefox-bin[0x82a1940]
/usr/lib/firefox/firefox-bin[0x82a2867]
/usr/lib/firefox/firefox-bin[0x82a2efa]
/usr/lib/firefox/firefox-bin[0x82a5921]
/usr/lib/firefox/firefox-bin[0x82a726b]
/usr/lib/firefox/firefox-bin[0x82a1940]
/usr/lib/firefox/firefox-bin[0x82a2867]
/usr/lib/firefox/firefox-bin[0x82a2efa]
/usr/lib/firefox/firefox-bin[0x82a5921]
/usr/lib/firefox/firefox-bin[0x82a726b]
/usr/lib/firefox/firefox-bin[0x82a1940]
/usr/lib/firefox/firefox-bin[0x82a2867]
/usr/lib/firefox/firefox-bin[0x82a2efa]
======= Memory map: ========
08048000-0899e000 r-xp 00000000 03:02 925684     /usr/lib/firefox/firefox-bin
0899e000-0899f000 r--p 00955000 03:02 925684     /usr/lib/firefox/firefox-bin
0899f000-089b5000 rw-p 00956000 03:02 925684     /usr/lib/firefox/firefox-bin
089b5000-09eba000 rw-p 089b5000 00:00 0          [heap]
afd00000-afd21000 rw-p afd00000 00:00 0 
afd21000-afe00000 ---p afd21000 00:00 0 
afe25000-afe47000 r--p 00000000 03:04 403941689  
/home/ajaxas/.fonts/verdanab.ttf
afe47000-afe9e000 r--p 00000000 03:04 403941683  
/home/ajaxas/.fonts/tahomabd.ttf
afe9e000-afec8000 r--p 00000000 03:04 403941688  /home/ajaxas/.fonts/verdana.ttf
afec8000-afecc000 r--p 00000000 03:02
844632     /usr/share/fonts/100dpi/helvR12.pcf.gz afecc000-afecd000 ---p
afecc000 00:00 0 afecd000-b06cd000 rw-p afecd000 00:00 0 
b06cd000-b06ce000 ---p b06cd000 00:00 0 
b06ce000-b0ece000 rw-p b06ce000 00:00 0 
b0ece000-b0ecf000 ---p b0ece000 00:00 0 
b0ecf000-b16cf000 rw-p b0ecf000 00:00 0 
b16cf000-b16d0000 ---p b16cf000 00:00 0 
b16d0000-b1ed0000 rw-p b16d0000 00:00 0 
b1ed0000-b1ed1000 ---p b1ed0000 00:00 0 
b1ed1000-b26d1000 rw-p b1ed1000 00:00 0 
b26d1000-b26d2000 
Program received signal SIGABRT, Aborted.
[Switching to Thread -1223063856 (LWP 30719)]
0xb7fbb410 in __kernel_vsyscall ()
(gdb) bt
#0  0xb7fbb410 in __kernel_vsyscall ()
Cannot access memory at address 0xbff4de90
(gdb) disass $pc-32 $pc+32
Dump of assembler code from 0xb7fbb3f0 to 0xb7fbb430:
0xb7fbb3f0:     Cannot access memory at address 0xb7fbb3f0
(gdb) info all-registers
eax            0x0      0
ecx            0x77ff   30719
edx            0x6      6
ebx            0x77ff   30719
esp            0xbff4de84       0xbff4de84
ebp            0xbff4de9c       0xbff4de9c
esi            0xbff4df3c       -1074471108
edi            0xb736aff4       -1221152780
eip            0xb7fbb410       0xb7fbb410 <__kernel_vsyscall+16>
eflags         0x206    [ PF IF ]
cs             0x73     115
ss             0x7b     123
ds             0x7b     123
es             0x7b     123
fs             0x0      0
gs             0x33     51
st0            0        (raw 0x00000000000000000000)
st1            2        (raw 0x40008000000000000000)
st2            -12      (raw 0xc002c000000000000000)
st3            -12      (raw 0xc002c000000000000000)
st4            15       (raw 0x4002f000000000000000)
st5            15360.499990000000000378577169612981     (raw
0x400cf001fffd60e94ee4) st6            15       (raw 0x4002f000000000000000)
st7            15       (raw 0x4002f000000000000000)
fctrl          0x37f    895
fstat          0x4023   16419
ftag           0xffff   65535
fiseg          0x0      0
fioff          0x0      0
foseg          0x0      0
fooff          0x0      0
fop            0x0      0
xmm0           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},
v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0, 0x0}, uint128 =
0x00000000000000000000000000000000} xmm1           {v4_float = {0x0, 0x0, 0x0,
0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 =
{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0},
v2_int64 = {0x0, 0x0}, uint128 = 0x00000000000000000000000000000000}
xmm2           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},
v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0, 0x0}, uint128 =
0x00000000000000000000000000000000} xmm3           {v4_float = {0x0, 0x0, 0x0,
0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 =
{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0},
v2_int64 = {0x0, 0x0}, uint128 = 0x00000000000000000000000000000000}
xmm4           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},
v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0, 0x0}, uint128 =
0x00000000000000000000000000000000} xmm5           {v4_float = {0x0, 0x0, 0x0,
0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 =
{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0},
v2_int64 = {0x0, 0x0}, uint128 = 0x00000000000000000000000000000000}
xmm6           {v4_float = {0x0, 0x0, 0x0, 0x0}, v2_double = {0x0, 0x0},
v16_int8 = {0x0 <repeats 16 times>}, v8_int16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0, 0x0}, uint128 =
0x00000000000000000000000000000000} xmm7           {v4_float = {0x0, 0x0, 0x0,
0x0}, v2_double = {0x0, 0x0}, v16_int8 = {0x0 <repeats 16 times>}, v8_int16 =
{0x0, 0x0, 0x0, 0x0, ---Type <return> to continue, or q <return> to quit--- 0x0,
0x0, 0x0, 0x0}, v4_int32 = {0x0, 0x0, 0x0, 0x0}, v2_int64 = {0x0, 0x0}, uint128
= 0x00000000000000000000000000000000} mxcsr          0x1f80   [ IM DM ZM OM UM
PM ] mm0            {uint64 = 0x0, v2_int32 = {0x0, 0x0}, v4_int16 = {0x0, 0x0,
0x0, 0x0}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}} mm1
{uint64 = 0x8000000000000000, v2_int32 = {0x0, 0x80000000}, v4_int16 = {0x0,
0x0, 0x0, 0x8000}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}
mm2            {uint64 = 0xc000000000000000, v2_int32 = {0x0, 0xc0000000},
v4_int16 = {0x0, 0x0, 0x0, 0xc000}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
0x0, 0xc0}} mm3            {uint64 = 0xc000000000000000, v2_int32 = {0x0,
0xc0000000}, v4_int16 = {0x0, 0x0, 0x0, 0xc000}, v8_int8 = {0x0, 0x0, 0x0, 0x0,
0x0, 0x0, 0x0, 0xc0}} mm4            {uint64 = 0xf000000000000000, v2_int32 =
{0x0, 0xf0000000}, v4_int16 = {0x0, 0x0, 0x0, 0xf000}, v8_int8 = {0x0, 0x0, 0x0,
0x0, 0x0, 0x0, 0x0, 0xf0}} mm5            {uint64 = 0xf001fffd60e94ee4, v2_int32
= {0x60e94ee4, 0xf001fffd}, v4_int16 = {0x4ee4, 0x60e9, 0xfffd, 0xf001}, v8_int8
= {0xe4, 0x4e, 0xe9, 0x60, 0xfd, 0xff, 0x1, 0xf0}} mm6            {uint64 =
0xf000000000000000, v2_int32 = {0x0, 0xf0000000}, v4_int16 = {0x0, 0x0, 0x0,
0xf000}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}} mm7
{uint64 = 0xf000000000000000, v2_int32 = {0x0, 0xf0000000}, v4_int16 = {0x0,
0x0, 0x0, 0xf000}, v8_int8 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}}


-- 
ajaxas <address@hidden>


-- 
ajaxas <address@hidden>