[ft-devel] [bug-report] Random segfaults in af_loader_load_g

[Maxime Villard]

Hi,
I am running OpenBSD, and I have been experiencing recurrent crashes
since I installed Gnome 3.10. These crashes are caused by freetype. I
already reported the bug to the OpenBSD developers, but they don't know
what's wrong, that's why I ask here.

           http://marc.info/?t=138398416300001&r=1&w=2

Here is the output of my gnome-shell.core file:

#0  0x000010879b7e5637 in af_loader_load_g (loader=0x10879f996420,
    scaler=0x7f7ffffc9780, glyph_index=80, load_flags=2593, depth=0)
    at afloader.c:403
403           vvector.y = FT_MulFix( vvector.y, metrics->scaler.y_scale );
(gdb) bt
#0  0x000010879b7e5637 in af_loader_load_g (loader=0x10879f996420,
    scaler=0x7f7ffffc9780, glyph_index=80, load_flags=2593, depth=0)
    at afloader.c:403
#1  0x000010879b7e6024 in af_autofitter_load_glyph (module=0x10879f996400,
    slot=0x7f7ffffc96d0, size=Variable "size" is not available.
) at afloader.c:56
#2  0x000010879b83cf9d in FT_Load_Glyph (face=0x10879d2ea800,
glyph_index=80,
    load_flags=544) at ftobjs.c:830
#3  0x00001087a36051b8 in _cairo_ft_scaled_glyph_init ()
   from /usr/local/lib/libcairo.so.12.2
#4  0x00001087a35b5515 in _cairo_scaled_glyph_lookup ()
   from /usr/local/lib/libcairo.so.12.2
#5  0x00001087a35b6e60 in _cairo_scaled_font_glyph_device_extents ()
   from /usr/local/lib/libcairo.so.12.2
#6  0x00001087a3579175 in _cairo_composite_rectangles_init_for_glyphs ()
   from /usr/local/lib/libcairo.so.12.2
#7  0x00001087a35799f8 in _cairo_compositor_glyphs ()
   from /usr/local/lib/libcairo.so.12.2
#8  0x00001087a358a1ff in _cairo_image_surface_glyphs ()
   from /usr/local/lib/libcairo.so.12.2
#9  0x00001087a35bdd4b in _cairo_surface_show_text_glyphs ()
   from /usr/local/lib/libcairo.so.12.2

Program terminated with signal 11, Segmentation fault.
[...]
#0  0x000010879b7e5637 in af_loader_load_g (loader=0x10879f996420,
scaler=0x7f7ffffc9780, glyph_index=80, load_flags=2593, depth=0) at
afloader.c:403
403           vvector.y = FT_MulFix( vvector.y, metrics->scaler.y_scale );
(gdb) print metrics
$1 = 0x10879895a000
(gdb) print metrics->scaler
$2 = {face = 0x10879d2ea800, x_scale = 78316, y_scale = 76718, x_delta =
0, y_delta = 0, render_mode = FT_RENDER_MODE_NORMAL, flags = 0}
(gdb) print vvector
$3 = {x = -42, y = -576}


AFAIK, OpenBSD has freetype 2.5.0.1. If you have any patch that
you want me to test, feel absolutely free to send it.

Thanks,
Maxime