bugThe FreeType Project - Bugs: bug #25750, Crash in tt_face_get_kerning

 
 

bug #25750: Crash in tt_face_get_kerning

Submitted by:  Philip Withnall <drbob>
Submitted on:  Mon 02 Mar 2009 05:06:21 PM UTC  
 
Severity: 3 - NormalItem Group: Crash
Status: FixedPrivacy: Public
Assigned to: Werner LEMBERG <wl>Open/Closed: Closed
Planned Release: 2.3.9

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Tue 03 Mar 2009 10:37:21 PM UTC, comment #2:

should be fixed in CVS now

David Turner <freetype>
Project Administrator
Mon 02 Mar 2009 07:28:27 PM UTC, comment #1:

Which font? The passed value for `ttface', 0x100000, looks very
strange...

Werner LEMBERG <wl>
Project AdministratorIn charge of this item.
Mon 02 Mar 2009 05:06:21 PM UTC, original submission:

Original report here: http://bugzilla.gnome.org/show_bug.cgi?id=573554

#6 <signal handler called>
No symbol table info available.
#7 0xb7055a38 in tt_face_get_kerning (face=0x811b5f0, left_glyph=16,
right_glyph=3) at /usr/local/src/freetype-2.3.8/src/sfnt/ttkern.c:195
num_pairs = 135378416
key0 = 135307244
next = (FT_Byte *) 0xbf896bc8 "øk\211¿J÷\001·ðµ\021\b\020"
coverage = 3073213327
value = <value optimized out>
result = 0
count = 1
mask = 1
p = (FT_Byte *) 0xb6852d82 <Address 0xb6852d82 out of bounds>
#8 0xb702d66b in tt_get_kerning (ttface=0x100000, left_glyph=16,
right_glyph=3, kerning=0xbf896c34)
at /usr/local/src/freetype-2.3.8/src/truetype/ttdriver.c:119
No locals.
#9 0xb701f74a in FT_Get_Kerning (face=0x811b5f0, left_glyph=16,
right_glyph=3, kern_mode=0, akerning=0xbf896c34)
at /usr/local/src/freetype-2.3.8/src/base/ftobjs.c:2749
error = 0
driver = <value optimized out>
#10 0xb72fec60 in pango_fc_font_kern_glyphs (font=0x8105808, glyphs=0x8397b40)
at pangofc-font.c:794
face = (FT_Face) 0x811b5f0
error = <value optimized out>
kerning = {x = 0, y = 0}
i = 1
_PRETTY_FUNCTION_ = "pango_fc_font_kern_glyphs"
#11 0xb730528e in pango_ot_buffer_output (buffer=0x8279b80, glyphs=0x8397b40)
at pango-ot-buffer.c:403
face = (FT_Face) 0x811b5f0
info = <value optimized out>
gdef = (HB_GDEF) 0x8122448
i = 2
last_cluster = 1
_PRETTY_FUNCTION_ = "pango_ot_buffer_output"
#12 0xb7f5debb in basic_engine_shape (engine=0x8104e90, font=0x8105808,
text=0x81da687 "- å\221¨å¸\206", length=2, analysis=0x8297cd4,
glyphs=0x8397b40) at basic-fc.c:213
face = (FT_Face) 0x811b5f0
desc = {script = PANGO_SCRIPT_HAN, language = 0x8262cf4,
static_gsub_features = 0xb7f5e040, n_static_gsub_features = 4,
static_gpos_features = 0xb7f5e080, n_static_gpos_features = 3,
other_features = 0x0, n_other_features = 0}
ruleset = (const PangoOTRuleset *) 0x8122af0
buffer = (PangoOTBuffer *) 0x8279b80
n_chars = 2
p = 0x81da688 " å\221¨å¸\206"
cluster = 1
i = 2
_PRETTY_FUNCTION_ = "basic_engine_shape"
#13 0xb70ef8aa in _pango_engine_shape_shape (engine=0x8104e90,
font=0x8105808, text=0x81da687 "- å\221¨å¸\206", length=2,
analysis=0x8297cd4, glyphs=0x8397b40) at pango-engine.c:71
No locals.
#14 0xb7101fd9 in pango_shape (text=0x81da687 "- å\221¨å¸\206", length=2,
analysis=0x8297cd4, glyphs=0x8397b40) at shape.c:55
i = <value optimized out>
last_cluster = <value optimized out>

Philip Withnall <drbob>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by freetype (Posted a comment)
  • -unavailable- added by wl (Posted a comment)
  • -unavailable- added by drbob (Submitted the item)
  • -unavailable- added by drbob (Original submitter)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 6 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Tue 03 Mar 2009 10:37:21 PM UTCfreetypeStatusNeed Info=>Fixed
      Open/ClosedOpen=>Closed
      Planned ReleaseNone=>2.3.9
    Mon 02 Mar 2009 07:28:27 PM UTCwlStatusNone=>Need Info
      Assigned toNone=>wl
    Mon 02 Mar 2009 05:06:21 PM UTCdrbobCarbon-Copy-=>Added -unavailable-

    Back to the top


    Powered by Savane 3.1-cleanup1