[Bug 409369] New: Crash in pango_fc_font_real_get_glyph when using thai module

[pango (bugzilla.gnome.org)]

Do not reply to this via email (we are currently unable to handle email
responses and they get discarded).  You can add comments to this bug at
http://bugzilla.gnome.org/show_bug.cgi?id=409369

  pango | general | Ver: unspecified

           Summary: Crash in pango_fc_font_real_get_glyph when using thai
                    module
           Product: pango
           Version: unspecified
          Platform: Other
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: major
          Priority: Normal
         Component: general
        AssignedTo: pango-maint at gnome.bugs
        ReportedBy: joss at debian.org
         QAContact: pango-maint at gnome.bugs
                CC: pkg-gnome-maintainers at lists.alioth.debian.org
     GNOME version: 2.13/2.14
   GNOME milestone: Unspecified


[ forwarded from http://bugs.debian.org/410167 ]

This is similar to Bug#364620 but the backtrace is different. When using the
thai module, a user is getting reproducible crashes:


Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 47616068345712 (LWP 27460)]
pango_fc_font_real_get_glyph (font=0xa8e180, wc=3749)
    at /usr/src/pango/pango1.0-1.14.8/./pango/pangofc-font.c:565
565           if (index > (FT_UInt)face->num_glyphs)
(gdb) bt
#0  pango_fc_font_real_get_glyph (font=0xa8e180, wc=3749)
    at /usr/src/pango/pango1.0-1.14.8/./pango/pangofc-font.c:565
#1  0x00002aaaac114261 in thai_make_glyph_uni (font_info=<value optimized out>,
uc=3749)
    at /usr/src/pango/pango1.0-1.14.8/./modules/thai/thai-fc.c:230
#2  0x00002aaaac1137f0 in get_adjusted_glyphs_list (font_info=0x124d3b0,
cluster=0x7fff355a6eb0,
    num_chrs=1, glyph_lists=0x7fff355a6ab0, shaping_table=0x2aaaac115060)
    at /usr/src/pango/pango1.0-1.14.8/./modules/thai/thai-shaper.c:179
#3  0x00002aaaac113f55 in thai_engine_shape (engine=<value optimized out>,
font=0xa8e180,
    text=<value optimized out>, length=3762, analysis=<value optimized out>,
glyphs=0x125e6a0)
    at /usr/src/pango/pango1.0-1.14.8/./modules/thai/thai-shaper.c:465
#4  0x00002b4e76a6401e in pango_shape (text=0x125df8b "ລາວ</option>",
length=11,
    analysis=0xc15890, glyphs=0x125e6a0) at
/usr/src/pango/pango1.0-1.14.8/./pango/shape.c:51
#5  0x00002b4e76a58d2c in shape_run (line=0xe17c70, state=0x7fff355a74d0,
item=0xc15880)
    at /usr/src/pango/pango1.0-1.14.8/./pango/pango-layout.c:2771
#6  0x00002b4e76a5b147 in process_item (layout=0xa6c980, line=0xe17c70,
state=0x7fff355a74d0,
    force_fit=0, no_break_at_end=0) at
/usr/src/pango/pango1.0-1.14.8/./pango/pango-layout.c:2863
#7  0x00002b4e76a5b92b in pango_layout_check_lines (layout=0xa6c980)
    at /usr/src/pango/pango1.0-1.14.8/./pango/pango-layout.c:3065
#8  0x00002b4e76a5c17d in pango_layout_get_extents_internal (layout=0x0,
ink_rect=0x0,
    logical_rect=0x7fff355a77d0, line_extents=0x0, real_width=0x0)
    at /usr/src/pango/pango1.0-1.14.8/./pango/pango-layout.c:2070
#9  0x00002b4e763f47f8 in gtk_text_layout_get_line_display () from
/usr/lib/libgtk-x11-2.0.so.0
#10 0x00002b4e763f73e2 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#11 0x00002b4e763dfdbc in ?? () from /usr/lib/libgtk-x11-2.0.so.0
---Type <return> to continue, or q <return> to quit---
#12 0x00002b4e763dfed2 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#13 0x00002b4e763dfed2 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#14 0x00002b4e763dfed2 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#15 0x00002b4e763e00df in _gtk_text_btree_validate () from
/usr/lib/libgtk-x11-2.0.so.0
#16 0x00002b4e763f62f3 in gtk_text_layout_validate () from
/usr/lib/libgtk-x11-2.0.so.0
#17 0x00002b4e764013ad in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#18 0x00002b4e775fdc73 in g_main_context_dispatch () from
/usr/lib/libglib-2.0.so.0
#19 0x00002b4e77600abd in ?? () from /usr/lib/libglib-2.0.so.0
#20 0x00002b4e77600da6 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#21 0x00002b4e763746b2 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#22 0x0000000000426849 in main ()


-- 
Configure bugmail: http://bugzilla.gnome.org/userprefs.cgi?tab=email