Bug#365607: crash on http://en.wikipedia.org with ttf-dejavu

2006-06-25 Thread Oskar Liljeblad 
On Saturday, June 24, 2006 at 19:52, Eric Dorland wrote:
 So, just to confirm, this only happens with ttf-dejavu? 

Yes, it did, but now I can't reproduce it any longer...
I guess some other package was updated and that fixed
the problem. So this bug can be closed... 

Regards,

Oskar


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#365607: crash on http://en.wikipedia.org with ttf-dejavu

2006-06-24 Thread Eric Dorland 
So, just to confirm, this only happens with ttf-dejavu? 

* Oskar Liljeblad ([EMAIL PROTECTED]) wrote:
 On Monday, May 01, 2006 at 14:17, Justin Pryzby wrote:
 [..]
   htmlbody style=font: x-small sans-serif;#7879;
  Very interesting.  Thanks for narrowing it down.
  
  It doesn't crash for me, though.  It looks like it might be a pango
  problem.  Could you try the usual workaround, with
  MOZ_DISABLE_PANGO=1?
 
 Thanks for the quick response. I exported MOZ_DISABLE_PANGO=1
 and ran firefox --debugger gdb. It crashes this time too,
 but with different stack trace:
 
 Program received signal SIGSEGV, Segmentation fault.
 [Switching to Thread 46991541412928 (LWP 2484)]
 0x2abd11a8afa4 in TT_New_Context () from /usr/lib/libfreetype.so.6
 (gdb) where
 #0  0x2abd11a8afa4 in TT_New_Context () from /usr/lib/libfreetype.so.6
 #1  0x2abd11a8b2a8 in TT_New_Context () from /usr/lib/libfreetype.so.6
 #2  0x2abd11a8bf63 in TT_RunIns () from /usr/lib/libfreetype.so.6
 #3  0x2abd11a90437 in TT_RunIns () from /usr/lib/libfreetype.so.6
 #4  0x2abd11a8fc3b in TT_RunIns () from /usr/lib/libfreetype.so.6
 #5  0x2abd11a90729 in TT_RunIns () from /usr/lib/libfreetype.so.6
 #6  0x2abd11a50fa5 in FT_Load_Glyph () from /usr/lib/libfreetype.so.6
 #7  0x2abd11bc6f5e in XftFontLoadGlyphs () from /usr/lib/libXft.so.2
 #8  0x2abd11bc475f in XftGlyphExtents () from /usr/lib/libXft.so.2
 #9  0x2abd11bc4b2b in XftTextExtents32 () from /usr/lib/libXft.so.2
 #10 0x005d46df in nsFontXft::GetTextExtents32 (this=value optimized
 out, aString=0x23d5c00, aLen=3816, [EMAIL PROTECTED]) at
 nsFontMetricsXft.cpp:1947
 #11 0x005d418d in nsFontMetricsXft::TextDimensionsCallback
 (this=0x23c2a20, aString=0x7fd93108, aLen=1, aFont=0xecf, aData=0xecf)
 at nsFontMetricsXft.cpp:1606
 #12 0x005d7989 in nsFontMetricsXft::EnumerateGlyphs (this=0x23c2a20,
 aString=value optimized out, aLen=value optimized out, aCallback=
   {__pfn = 0x5d4150 nsFontMetricsXft::TextDimensionsCallback(unsigned
 int const*, unsigned int, nsFontXft*, void*), __delta = 0},
 aCallbackData=0x7fd96390)
 at nsFontMetricsXft.cpp:1471
 #13 0x005d8411 in nsFontMetricsXft::GetTextDimensions
 (this=0x23c2a20, aString=0xee7, aLength=61056, [EMAIL PROTECTED],
 aFontID=0x0, aContext=value optimized out)
 at nsFontMetricsXft.cpp:538
 #14 0x006d67de in nsTextFrame::MeasureText (this=0x23d37a8,
 aPresContext=0x21a4c30, [EMAIL PROTECTED], [EMAIL PROTECTED],
 aLb=0x170b1f0, [EMAIL PROTECTED], 
 [EMAIL PROTECTED]) at nsTextFrame.cpp:5416
 #15 0x006d8e10 in nsTextFrame::Reflow (this=0x23d37a8,
 aPresContext=0x21a4c30, [EMAIL PROTECTED],
 [EMAIL PROTECTED], [EMAIL PROTECTED])
 at nsTextFrame.cpp:5980
 #16 0x006b11ea in nsLineLayout::ReflowFrame (this=0x7fd96ae0,
 aFrame=0x23d37a8, [EMAIL PROTECTED], aMetrics=0x0,
 [EMAIL PROTECTED])
 at nsLineLayout.cpp:995
 #17 0x00680262 in nsBlockFrame::ReflowInlineFrame (this=0x2332ed0,
 [EMAIL PROTECTED], [EMAIL PROTECTED], aLine={mCurrent =
 0x23d3800}, aFrame=0x23d37a8, 
 aLineReflowStatus=0x7fd96a87 ) at nsBlockFrame.cpp:4013
 #18 0x00680893 in nsBlockFrame::DoReflowInlineFrames
 (this=0x2332ed0, [EMAIL PROTECTED], [EMAIL PROTECTED],
 aLine={mCurrent = 0x23d3800}, 
 aKeepReflowGoing=0x7fd96d8c, aLineReflowStatus=0x7fd96bcf
 \002, aUpdateMaximumWidth=0, aDamageDirtyArea=1) at nsBlockFrame.cpp:3852
 #19 0x00680b5a in nsBlockFrame::ReflowInlineFrames (this=0x2332ed0,
 [EMAIL PROTECTED], aLine={mCurrent = 0x23d3800},
 aKeepReflowGoing=0x7fd96d8c, 
 aDamageDirtyArea=1, aUpdateMaximumWidth=0) at nsBlockFrame.cpp:3734
 #20 0x00680da7 in nsBlockFrame::ReflowLine (this=0xecf,
 [EMAIL PROTECTED], aLine={mCurrent = 0x23d3800},
 aKeepReflowGoing=0x7fd96d8c, aDamageDirtyArea=1)
 at nsBlockFrame.cpp:2728
 #21 0x00681327 in nsBlockFrame::ReflowDirtyLines (this=0x2332ed0,
 [EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262
 #22 0x0068254a in nsBlockFrame::Reflow (this=0x2332ed0,
 aPresContext=0x21a4c30, [EMAIL PROTECTED],
 [EMAIL PROTECTED], [EMAIL PROTECTED])
 at nsBlockFrame.cpp:902
 #23 0x00683b28 in nsBlockReflowContext::ReflowBlock
 (this=0x7fd97420, aSpace=value optimized out, aApplyTopMargin=value
 optimized out, 
 [EMAIL PROTECTED], aClearance=value optimized out,
 aIsAdjacentWithTop=value optimized out, [EMAIL PROTECTED],
 [EMAIL PROTECTED], 
 [EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605
 #24 0x0067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x2332c18,
 [EMAIL PROTECTED], aLine={mCurrent = 0x2332f78},
 aKeepReflowGoing=0x7fd9777c)
 at nsBlockFrame.cpp:3449
 #25 0x00680c4e in nsBlockFrame::ReflowLine (this=0x2332c18,
 [EMAIL PROTECTED], aLine={mCurrent = 0x2332f78}, 
 aKeepReflowGoing=0x7fd9777c,
 aDamageDirtyArea=1)
 at nsBlockFrame.cpp:2610
 #26 0x00681327 in

Bug#365607: crash on http://en.wikipedia.org with ttf-dejavu

2006-05-01 Thread Oskar Liljeblad 
Package: mozilla-firefox
Version: 1.5.dfsg+1.5.0.2-3
Severity: normal

With ttf-dejavu (2.4.1-1) install, Firefox crashes on http://en.wikipedia.org.
Here's the stack trace:

#0  0x2b17eda6f44d in cairo_status_to_string () from /usr/lib/libcairo.so.2
#1  0x2b17eda6f7d1 in cairo_status_to_string () from /usr/lib/libcairo.so.2
#2  0x2b17eda83589 in cairo_ft_scaled_font_unlock_face ()
   from /usr/lib/libcairo.so.2
#3  0x2b17eda7150e in cairo_scaled_font_glyph_extents ()
   from /usr/lib/libcairo.so.2
#4  0x2b17ecfa906b in pango_cairo_fc_font_get_type ()
   from /usr/lib/libpangocairo-1.0.so.0
#5  0x2b17ee27f590 in pango_ot_buffer_output ()
   from /usr/lib/libpangoft2-1.0.so.0
#6  0x2c5db762 in ?? ()
   from /usr/lib/pango/1.5.0/modules/pango-basic-fc.so
#7  0x2b17ed949107 in pango_shape () from /usr/lib/libpango-1.0.so.0
#8  0x2b17ed93d6d4 in pango_layout_line_index_to_x ()
   from /usr/lib/libpango-1.0.so.0
#9  0x2b17ed940208 in pango_layout_iter_get_char_extents ()
   from /usr/lib/libpango-1.0.so.0
#10 0x2b17ed940a28 in pango_layout_iter_get_char_extents ()
   from /usr/lib/libpango-1.0.so.0
#11 0x2b17ed9428f1 in pango_layout_get_line ()
   from /usr/lib/libpango-1.0.so.0
#12 0x005d92f6 in nsFontMetricsPango::FixupSpaceWidths (
this=0x22ccc40, aLayout=0x1c9c960, 
aString=0xfdd98690 Address 0xfdd98690 out of bounds)
at nsFontMetricsPango.cpp:1518
#13 0x005da73e in nsFontMetricsPango::GetWidth (this=0x22ccc40, 
aString=0x1c8daf0 Tiếng Viá»\207t (Vietnamese), aLength=27, 
[EMAIL PROTECTED], aContext=value optimized out)
at nsFontMetricsPango.cpp:469
#14 0x005d944c in nsFontMetricsPango::GetTextDimensionsInternal (
this=0x22ccc40, aString=0x1c8daf0 Tiếng Viá»\207t (Vietnamese), 
aLength=27, aAvailWidth=6068, aBreaks=0x23debf0, aNumBreaks=5, 
[EMAIL PROTECTED], [EMAIL PROTECTED], 
[EMAIL PROTECTED], aContext=0x17b7340)
at nsFontMetricsPango.cpp:1442
#15 0x005d97de in nsFontMetricsPango::GetTextDimensions (
this=0x22ccc40, aString=0x7fab1374, aLength=23, aAvailWidth=6068, 
aBreaks=0x7fab100c, aNumBreaks=5, [EMAIL PROTECTED], 
[EMAIL PROTECTED], [EMAIL PROTECTED], 
aFontID=0x0, aContext=0xfdd98690) at nsFontMetricsPango.cpp:667
#16 0x005d0fd1 in nsRenderingContextGTK::GetTextDimensions (
this=value optimized out, aString=0x7fab0710, aLength=-36075888, 
aAvailWidth=11, aBreaks=0xaabe9c74, aNumBreaks=14262, 
[EMAIL PROTECTED], [EMAIL PROTECTED], 
[EMAIL PROTECTED], aFontID=0x2326ac0)
at nsRenderingContextGTK.cpp:1305
#17 0x006d64ba in nsTextFrame::MeasureText (this=0x20bee78, 
aPresContext=0x1da5d50, [EMAIL PROTECTED], [EMAIL PROTECTED], 
aLb=0x1f4a9b0, [EMAIL PROTECTED], [EMAIL PROTECTED])
at nsTextFrame.cpp:5503
#18 0x006d8e10 in nsTextFrame::Reflow (this=0x20bee78, 
aPresContext=0x1da5d50, [EMAIL PROTECTED], 
[EMAIL PROTECTED], [EMAIL PROTECTED])
at nsTextFrame.cpp:5980
#19 0x006b11ea in nsLineLayout::ReflowFrame (this=0x7fab1d10, 
aFrame=0x20bee78, [EMAIL PROTECTED], aMetrics=0x0, 
[EMAIL PROTECTED]) at nsLineLayout.cpp:995
#20 0x006ab6e3 in nsInlineFrame::ReflowInlineFrame (this=0x20bee20, 
aPresContext=0x1da5d50, aReflowState=value optimized out, 
[EMAIL PROTECTED], aFrame=0x20bee78, [EMAIL PROTECTED])
at nsInlineFrame.cpp:684
#21 0x006ab9ab in nsInlineFrame::ReflowFrames (this=0x20bee20, 
aPresContext=0x1da5d50, [EMAIL PROTECTED], [EMAIL PROTECTED], 
[EMAIL PROTECTED], [EMAIL PROTECTED]) at nsInlineFrame.cpp:519
#22 0x006abdf9 in nsInlineFrame::Reflow (this=0x20bee20, 
aPresContext=0x1da5d50, [EMAIL PROTECTED], 
[EMAIL PROTECTED], [EMAIL PROTECTED])
at nsInlineFrame.cpp:429
#23 0x006b11ea in nsLineLayout::ReflowFrame (this=0x7fab1d10, 
aFrame=0x20bee20, [EMAIL PROTECTED], aMetrics=0x0, 
[EMAIL PROTECTED]) at nsLineLayout.cpp:995
#24 0x00680262 in nsBlockFrame::ReflowInlineFrame (this=0x20bb5c8, 
[EMAIL PROTECTED], [EMAIL PROTECTED], aLine=
  {mCurrent = 0x23d91f0}, aFrame=0x20bee20, 
aLineReflowStatus=0x7fab1cb7 ) at nsBlockFrame.cpp:4013
#25 0x00680893 in nsBlockFrame::DoReflowInlineFrames (this=0x20bb5c8, 
[EMAIL PROTECTED], [EMAIL PROTECTED], aLine=
  {mCurrent = 0x23d91f0}, aKeepReflowGoing=0x7fab1fbc, 
aLineReflowStatus=0x7fab1dff \002, aUpdateMaximumWidth=0, 
aDamageDirtyArea=0) at nsBlockFrame.cpp:3852
#26 0x00680b5a in nsBlockFrame::ReflowInlineFrames (this=0x20bb5c8, 
[EMAIL PROTECTED], aLine={mCurrent = 0x23d91f0}, 
aKeepReflowGoing=0x7fab1fbc, aDamageDirtyArea=0, aUpdateMaximumWidth=0)
at nsBlockFrame.cpp:3734
#27 0x00680da7 in nsBlockFrame::ReflowLine (this=0x1c9c960, 
[EMAIL PROTECTED], aLine={mCurrent = 0x23d91f0}, 
aKeepReflowGoing=0x7fab1fbc,

Bug#365607: crash on http://en.wikipedia.org with ttf-dejavu

2006-05-01 Thread Justin Pryzby 
On Mon, May 01, 2006 at 02:50:08PM +0200, Oskar Liljeblad wrote:
 Package: mozilla-firefox
 Version: 1.5.dfsg+1.5.0.2-3
 Severity: normal
 
 With ttf-dejavu (2.4.1-1) install, Firefox crashes on http://en.wikipedia.org.
 Here's the stack trace:
 
 #0  0x2b17eda6f44d in cairo_status_to_string () from 
 /usr/lib/libcairo.so.2
 #1  0x2b17eda6f7d1 in cairo_status_to_string () from 
 /usr/lib/libcairo.so.2
 #2  0x2b17eda83589 in cairo_ft_scaled_font_unlock_face ()
from /usr/lib/libcairo.so.2
 #3  0x2b17eda7150e in cairo_scaled_font_glyph_extents ()
from /usr/lib/libcairo.so.2
 #4  0x2b17ecfa906b in pango_cairo_fc_font_get_type ()
from /usr/lib/libpangocairo-1.0.so.0
 #5  0x2b17ee27f590 in pango_ot_buffer_output ()
from /usr/lib/libpangoft2-1.0.so.0
 #6  0x2c5db762 in ?? ()
from /usr/lib/pango/1.5.0/modules/pango-basic-fc.so
 #7  0x2b17ed949107 in pango_shape () from /usr/lib/libpango-1.0.so.0
 #8  0x2b17ed93d6d4 in pango_layout_line_index_to_x ()
from /usr/lib/libpango-1.0.so.0
 #9  0x2b17ed940208 in pango_layout_iter_get_char_extents ()
from /usr/lib/libpango-1.0.so.0
 #10 0x2b17ed940a28 in pango_layout_iter_get_char_extents ()
from /usr/lib/libpango-1.0.so.0
 #11 0x2b17ed9428f1 in pango_layout_get_line ()
from /usr/lib/libpango-1.0.so.0
 #12 0x005d92f6 in nsFontMetricsPango::FixupSpaceWidths (
 this=0x22ccc40, aLayout=0x1c9c960, 
 aString=0xfdd98690 Address 0xfdd98690 out of bounds)
 at nsFontMetricsPango.cpp:1518
 #13 0x005da73e in nsFontMetricsPango::GetWidth (this=0x22ccc40, 
 aString=0x1c8daf0 Ti???ng Vi??\207t (Vietnamese), aLength=27, 
 [EMAIL PROTECTED], aContext=value optimized out)
 at nsFontMetricsPango.cpp:469
 #14 0x005d944c in nsFontMetricsPango::GetTextDimensionsInternal (
 this=0x22ccc40, aString=0x1c8daf0 Ti???ng Vi??\207t (Vietnamese), 
 aLength=27, aAvailWidth=6068, aBreaks=0x23debf0, aNumBreaks=5, 
 [EMAIL PROTECTED], [EMAIL PROTECTED], 
 [EMAIL PROTECTED], aContext=0x17b7340)
 at nsFontMetricsPango.cpp:1442
 #15 0x005d97de in nsFontMetricsPango::GetTextDimensions (
 this=0x22ccc40, aString=0x7fab1374, aLength=23, aAvailWidth=6068, 
 aBreaks=0x7fab100c, aNumBreaks=5, [EMAIL PROTECTED], 
 [EMAIL PROTECTED], [EMAIL PROTECTED], 
 aFontID=0x0, aContext=0xfdd98690) at nsFontMetricsPango.cpp:667
 #16 0x005d0fd1 in nsRenderingContextGTK::GetTextDimensions (
 this=value optimized out, aString=0x7fab0710, aLength=-36075888, 
 aAvailWidth=11, aBreaks=0xaabe9c74, aNumBreaks=14262, 
 [EMAIL PROTECTED], [EMAIL PROTECTED], 
 [EMAIL PROTECTED], aFontID=0x2326ac0)
 at nsRenderingContextGTK.cpp:1305
 #17 0x006d64ba in nsTextFrame::MeasureText (this=0x20bee78, 
 aPresContext=0x1da5d50, [EMAIL PROTECTED], [EMAIL PROTECTED], 
 aLb=0x1f4a9b0, [EMAIL PROTECTED], [EMAIL PROTECTED])
 at nsTextFrame.cpp:5503
 #18 0x006d8e10 in nsTextFrame::Reflow (this=0x20bee78, 
 aPresContext=0x1da5d50, [EMAIL PROTECTED], 
 [EMAIL PROTECTED], [EMAIL PROTECTED])
 at nsTextFrame.cpp:5980
 #19 0x006b11ea in nsLineLayout::ReflowFrame (this=0x7fab1d10, 
 aFrame=0x20bee78, [EMAIL PROTECTED], aMetrics=0x0, 
 [EMAIL PROTECTED]) at nsLineLayout.cpp:995
 #20 0x006ab6e3 in nsInlineFrame::ReflowInlineFrame (this=0x20bee20, 
 aPresContext=0x1da5d50, aReflowState=value optimized out, 
 [EMAIL PROTECTED], aFrame=0x20bee78, [EMAIL PROTECTED])
 at nsInlineFrame.cpp:684
 #21 0x006ab9ab in nsInlineFrame::ReflowFrames (this=0x20bee20, 
 aPresContext=0x1da5d50, [EMAIL PROTECTED], [EMAIL PROTECTED], 
 [EMAIL PROTECTED], [EMAIL PROTECTED]) at nsInlineFrame.cpp:519
 #22 0x006abdf9 in nsInlineFrame::Reflow (this=0x20bee20, 
 aPresContext=0x1da5d50, [EMAIL PROTECTED], 
 [EMAIL PROTECTED], [EMAIL PROTECTED])
 at nsInlineFrame.cpp:429
 #23 0x006b11ea in nsLineLayout::ReflowFrame (this=0x7fab1d10, 
 aFrame=0x20bee20, [EMAIL PROTECTED], aMetrics=0x0, 
 [EMAIL PROTECTED]) at nsLineLayout.cpp:995
 #24 0x00680262 in nsBlockFrame::ReflowInlineFrame (this=0x20bb5c8, 
 [EMAIL PROTECTED], [EMAIL PROTECTED], aLine=
   {mCurrent = 0x23d91f0}, aFrame=0x20bee20, 
 aLineReflowStatus=0x7fab1cb7 ) at nsBlockFrame.cpp:4013
 #25 0x00680893 in nsBlockFrame::DoReflowInlineFrames (this=0x20bb5c8, 
 [EMAIL PROTECTED], [EMAIL PROTECTED], aLine=
   {mCurrent = 0x23d91f0}, aKeepReflowGoing=0x7fab1fbc, 
 aLineReflowStatus=0x7fab1dff \002, aUpdateMaximumWidth=0, 
 aDamageDirtyArea=0) at nsBlockFrame.cpp:3852
 #26 0x00680b5a in nsBlockFrame::ReflowInlineFrames (this=0x20bb5c8, 
 [EMAIL PROTECTED], aLine={mCurrent = 0x23d91f0}, 
 aKeepReflowGoing=0x7fab1fbc, aDamageDirtyArea=0, 
 aUpdateMaximumWidth=0)
 at

Bug#365607: crash on http://en.wikipedia.org with ttf-dejavu

2006-05-01 Thread Oskar Liljeblad 
On Monday, May 01, 2006 at 14:17, Justin Pryzby wrote:
[..]
  htmlbody style=font: x-small sans-serif;#7879;
 Very interesting.  Thanks for narrowing it down.
 
 It doesn't crash for me, though.  It looks like it might be a pango
 problem.  Could you try the usual workaround, with
 MOZ_DISABLE_PANGO=1?

Thanks for the quick response. I exported MOZ_DISABLE_PANGO=1
and ran firefox --debugger gdb. It crashes this time too,
but with different stack trace:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 46991541412928 (LWP 2484)]
0x2abd11a8afa4 in TT_New_Context () from /usr/lib/libfreetype.so.6
(gdb) where
#0  0x2abd11a8afa4 in TT_New_Context () from /usr/lib/libfreetype.so.6
#1  0x2abd11a8b2a8 in TT_New_Context () from /usr/lib/libfreetype.so.6
#2  0x2abd11a8bf63 in TT_RunIns () from /usr/lib/libfreetype.so.6
#3  0x2abd11a90437 in TT_RunIns () from /usr/lib/libfreetype.so.6
#4  0x2abd11a8fc3b in TT_RunIns () from /usr/lib/libfreetype.so.6
#5  0x2abd11a90729 in TT_RunIns () from /usr/lib/libfreetype.so.6
#6  0x2abd11a50fa5 in FT_Load_Glyph () from /usr/lib/libfreetype.so.6
#7  0x2abd11bc6f5e in XftFontLoadGlyphs () from /usr/lib/libXft.so.2
#8  0x2abd11bc475f in XftGlyphExtents () from /usr/lib/libXft.so.2
#9  0x2abd11bc4b2b in XftTextExtents32 () from /usr/lib/libXft.so.2
#10 0x005d46df in nsFontXft::GetTextExtents32 (this=value optimized
out, aString=0x23d5c00, aLen=3816, [EMAIL PROTECTED]) at
nsFontMetricsXft.cpp:1947
#11 0x005d418d in nsFontMetricsXft::TextDimensionsCallback
(this=0x23c2a20, aString=0x7fd93108, aLen=1, aFont=0xecf, aData=0xecf)
at nsFontMetricsXft.cpp:1606
#12 0x005d7989 in nsFontMetricsXft::EnumerateGlyphs (this=0x23c2a20,
aString=value optimized out, aLen=value optimized out, aCallback=
  {__pfn = 0x5d4150 nsFontMetricsXft::TextDimensionsCallback(unsigned
int const*, unsigned int, nsFontXft*, void*), __delta = 0},
aCallbackData=0x7fd96390)
at nsFontMetricsXft.cpp:1471
#13 0x005d8411 in nsFontMetricsXft::GetTextDimensions
(this=0x23c2a20, aString=0xee7, aLength=61056, [EMAIL PROTECTED],
aFontID=0x0, aContext=value optimized out)
at nsFontMetricsXft.cpp:538
#14 0x006d67de in nsTextFrame::MeasureText (this=0x23d37a8,
aPresContext=0x21a4c30, [EMAIL PROTECTED], [EMAIL PROTECTED],
aLb=0x170b1f0, [EMAIL PROTECTED], 
[EMAIL PROTECTED]) at nsTextFrame.cpp:5416
#15 0x006d8e10 in nsTextFrame::Reflow (this=0x23d37a8,
aPresContext=0x21a4c30, [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED])
at nsTextFrame.cpp:5980
#16 0x006b11ea in nsLineLayout::ReflowFrame (this=0x7fd96ae0,
aFrame=0x23d37a8, [EMAIL PROTECTED], aMetrics=0x0,
[EMAIL PROTECTED])
at nsLineLayout.cpp:995
#17 0x00680262 in nsBlockFrame::ReflowInlineFrame (this=0x2332ed0,
[EMAIL PROTECTED], [EMAIL PROTECTED], aLine={mCurrent =
0x23d3800}, aFrame=0x23d37a8, 
aLineReflowStatus=0x7fd96a87 ) at nsBlockFrame.cpp:4013
#18 0x00680893 in nsBlockFrame::DoReflowInlineFrames
(this=0x2332ed0, [EMAIL PROTECTED], [EMAIL PROTECTED],
aLine={mCurrent = 0x23d3800}, 
aKeepReflowGoing=0x7fd96d8c, aLineReflowStatus=0x7fd96bcf
\002, aUpdateMaximumWidth=0, aDamageDirtyArea=1) at nsBlockFrame.cpp:3852
#19 0x00680b5a in nsBlockFrame::ReflowInlineFrames (this=0x2332ed0,
[EMAIL PROTECTED], aLine={mCurrent = 0x23d3800},
aKeepReflowGoing=0x7fd96d8c, 
aDamageDirtyArea=1, aUpdateMaximumWidth=0) at nsBlockFrame.cpp:3734
#20 0x00680da7 in nsBlockFrame::ReflowLine (this=0xecf,
[EMAIL PROTECTED], aLine={mCurrent = 0x23d3800},
aKeepReflowGoing=0x7fd96d8c, aDamageDirtyArea=1)
at nsBlockFrame.cpp:2728
#21 0x00681327 in nsBlockFrame::ReflowDirtyLines (this=0x2332ed0,
[EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262
#22 0x0068254a in nsBlockFrame::Reflow (this=0x2332ed0,
aPresContext=0x21a4c30, [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED])
at nsBlockFrame.cpp:902
#23 0x00683b28 in nsBlockReflowContext::ReflowBlock
(this=0x7fd97420, aSpace=value optimized out, aApplyTopMargin=value
optimized out, 
[EMAIL PROTECTED], aClearance=value optimized out,
aIsAdjacentWithTop=value optimized out, [EMAIL PROTECTED],
[EMAIL PROTECTED], 
[EMAIL PROTECTED]) at nsBlockReflowContext.cpp:605
#24 0x0067f8ba in nsBlockFrame::ReflowBlockFrame (this=0x2332c18,
[EMAIL PROTECTED], aLine={mCurrent = 0x2332f78},
aKeepReflowGoing=0x7fd9777c)
at nsBlockFrame.cpp:3449
#25 0x00680c4e in nsBlockFrame::ReflowLine (this=0x2332c18,
[EMAIL PROTECTED], aLine={mCurrent = 0x2332f78}, 
aKeepReflowGoing=0x7fd9777c,
aDamageDirtyArea=1)
at nsBlockFrame.cpp:2610
#26 0x00681327 in nsBlockFrame::ReflowDirtyLines (this=0x2332c18,
[EMAIL PROTECTED], aTryPull=1) at nsBlockFrame.cpp:2262
#27 0x0068254a in nsBlockFrame::Reflow (this=0x2332c18,
aPresContext=0x21a4c30, [EMAIL PROTECTED],