Chromium crashes when opening any web on RenderText::ApplyFadeEffects

[Miguel Rubio-Roy]

What happens:
Whenever I open a webpage in Chromium it crashes immediately (SIGSEGV). Apparently the problem is within the function gfx::RenderText::ApplyFadeEffects

How to reproduce:
Open Chromium
Type google.com + ENTER

Reproducibility:
Always

See attached the gdb backtrace
---
ApportVersion: 2.14.1-0ubuntu3.10
Architecture: amd64
Desktop-Session:
 'None'
 'None'
 'None'
DetectedPlugins:

DistroRelease: Ubuntu 14.04
Env:
 'None'
 'None'
InstallationDate: Installed on 2014-01-07 (468 days ago)
InstallationMedia: Ubuntu 13.04 "Raring Ringtail" - Release amd64 (20130424)
Load-Avg-1min: 0.60
Load-Processes-Running-Percent: 0.1%
MachineType: Hewlett-Packard HP EliteBook 8570w
NonfreeKernelModules: nvidia
Package: chromium-browser 41.0.2272.76-0ubuntu0.14.04.1.1076
PackageArchitecture: amd64
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.13.0-46-generic root=UUID=3d2e894a-c1e7-4f51-bd63-534f715f13fb ro quiet splash
ProcVersionSignature: Ubuntu 3.13.0-46.79-generic 3.13.11-ckt15
Tags: third-party-packages trusty
Uname: Linux 3.13.0-46-generic x86_64
UpgradeStatus: Upgraded to trusty on 2014-04-22 (363 days ago)
UserGroups:

_MarkForUpload: True
dmi.bios.date: 07/15/2013
dmi.bios.vendor: Hewlett-Packard
dmi.bios.version: 68IAV Ver. F.42
dmi.board.name: 176B
dmi.board.vendor: Hewlett-Packard
dmi.board.version: KBC Version 50.1C
dmi.chassis.type: 10
dmi.chassis.vendor: Hewlett-Packard
dmi.modalias: dmi:bvnHewlett-Packard:bvr68IAVVer.F.42:bd07/15/2013:svnHewlett-Packard:pnHPEliteBook8570w:pvrA1028C1100:rvnHewlett-Packard:rn176B:rvrKBCVersion50.1C:cvnHewlett-Packard:ct10:cvr:
dmi.product.name: HP EliteBook 8570w
dmi.product.version: A1028C1100
dmi.sys.vendor: Hewlett-Packard
modified.conffile..etc.default.chromium.browser: [deleted]

[Chad Miller (cmiller)]

Please attach statistics.

$ sudo apport-collect 1446272

Also, install "debsums" and test it.

$ debsums chromium-browser -c

[Miguel Rubio-Roy (mrubioroy)]

apport information

[Miguel Rubio-Roy (mrubioroy)]

apport information

[Miguel Rubio-Roy (mrubioroy)]

apport information

[Miguel Rubio-Roy (mrubioroy)]

apport information

[Miguel Rubio-Roy (mrubioroy)]

apport information

[Miguel Rubio-Roy (mrubioroy)]

apport information

[Miguel Rubio-Roy (mrubioroy)]

apport information

[Miguel Rubio-Roy (mrubioroy)]

apport information

[Miguel Rubio-Roy (mrubioroy)]

apport information

[Miguel Rubio-Roy (mrubioroy)]

apport information

[Miguel Rubio-Roy (mrubioroy)]

apport information

[Miguel Rubio-Roy (mrubioroy)]

apport information

[Miguel Rubio-Roy (mrubioroy)]

apport information

[Miguel Rubio-Roy (mrubioroy)]

apport information

[Miguel Rubio-Roy (mrubioroy)]

apport information

[Miguel Rubio-Roy (mrubioroy)]

apport information

[Miguel Rubio-Roy (mrubioroy)]

apport information

[Miguel Rubio-Roy (mrubioroy)]

$ debsums chromium-browser -c

returns nothing

[Chad Miller (cmiller)]

Thanks! Nothing there looks amiss. Please also install chromium-browser-dbg, run with "-g", and, at crash, paste

> info args
> bt full 4

[Miguel Rubio-Roy (mrubioroy)]

After installing chromium-browser-dbg:

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff60635dd in CreateFadeShader (color=4283190348, right_part=..., left_part=...,
    text_rect=...) at ../../ui/gfx/render_text.cc:145
145 ../../ui/gfx/render_text.cc: No such file or directory.
(gdb) info args
color = 4283190348
right_part = @0x7fffffffbb50: {origin_ = {x_ = 154, y_ = 0}, size_ = {width_ = 0,
    height_ = 23}}
left_part = @0x7fffffffbb40: {origin_ = {x_ = 0, y_ = 0}, size_ = {width_ = 0, height_ = 0}}
text_rect = @0x7fffffffbb60: {origin_ = {x_ = 0, y_ = 0}, size_ = {width_ = 137,
    height_ = 23}}
(gdb) bt full 4
#0 0x00007ffff60635dd in CreateFadeShader (color=4283190348, right_part=..., left_part=...,
    text_rect=...) at ../../ui/gfx/render_text.cc:145
        positions = {<std::_Vector_base<float, std::allocator<float> >> = {
            _M_impl = {<std::allocator<float>> = {<__gnu_cxx::new_allocator<float>> = {<No data fields>}, <No data fields>}, _M_start = 0x0, _M_finish = 0x0,
              _M_end_of_storage = 0x0}}, <No data fields>}
        colors = {<std::_Vector_base<unsigned int, std::allocator<unsigned int> >> = {
            _M_impl = {<std::allocator<unsigned int>> = {<__gnu_cxx::new_allocator<unsigned int>> = {<No data fields>}, <No data fields>}, _M_start = 0x0, _M_finish = 0x0,
              _M_end_of_storage = 0x0}}, <No data fields>}
        points = {{fX = 0, fY = 0}, {fX = 0, fY = 0}}
#1 gfx::RenderText::ApplyFadeEffects (this=this@entry=0x2d6b4c7d0c00,
    renderer=renderer@entry=0x7fffffffbc70) at ../../ui/gfx/render_text.cc:1140
        horizontal_alignment = <optimised out>
        left_part = {origin_ = {x_ = 0, y_ = 0}, size_ = {width_ = 0, height_ = 0}}
        right_part = {origin_ = {x_ = 154, y_ = 0}, size_ = {width_ = 0, height_ = 23}}
        solid_part = {origin_ = {x_ = 0, y_ = 0}, size_ = {width_ = 154, height_ = 23}}
        text_rect = {origin_ = {x_ = 0, y_ = 0}, size_ = {width_ = 137, height_ = 23}}
#2 0x00007ffff60675c7 in gfx::RenderTextHarfBuzz::DrawVisualText (this=0x2d6b4c7d0c00,
    canvas=<optimised out>) at ../../ui/gfx/render_text_harfbuzz.cc:967
        renderer = {canvas_ = 0x2d6b4cfb2860, canvas_skia_ = 0x2d6b4c669840, paint_ = {
            fTypeface = 0x0, fPathEffect = 0x0, fShader = 0x0, fXfermode = 0x0, fMaskFilter =
    0x0, fColorFilter = 0x0, fRasterizer = 0x0, fLooper = 0x0, fImageFilter = 0x0,
            fAnnotation = 0x0, fTextSize = 12, fTextScaleX = 1, fTextSkewX = 0,
            fColor = 4278190080, fWidth = 0, fMiterLimit = 4, {fBitfields = {fFlags = 641,
                fTextAlign = 0, fCapType = 0, fJoinType = 0, fStyle = 0, fTextEncoding = 3,
                fHinting = 2, fFilterLevel = 0}, fBitfieldsUInt = 184550017}},
          underline_thickness_ = -1, underline_position_ = 0, diagonal_ = {impl_ = {
              data_ = {<base::DefaultDeleter<gfx::internal::SkiaTextRenderer::DiagonalStrike>> = {<No data fields>}, ptr = 0x0}}}}
        line_offset = <optimised out>
#3 0x00007ffff6061f2f in gfx::RenderText::Draw (this=this@entry=0x2d6b4c7d0c00,
    canvas=canvas@entry=0x2d6b4cfb2860) at ../../ui/gfx/render_text.cc:768
No locals....

[Launchpad Janitor (janitor)]

[Expired for chromium-browser (Ubuntu) because there has been no activity for 60 days.]

[Miguel Rubio-Roy (mrubioroy)]

This bug is still reproducible with Chromium 43.0.2357.81 in an up-to-date Ubuntu 15.04 (64-bit).

Can I provide further details ?

[Miguel Rubio-Roy (mrubioroy)]

Still reproducible with Chromium-browser 48.0.2564.82-0ubuntu0.15.10.1.1219 in an up-to-date Ubuntu 15.10 (64-bits)

[Miguel Rubio-Roy (mrubioroy)]

Got it, Chromium crashes when LucidaGrande.ttf or LucidaGrandeBold.ttf are present in ~/.local/share/fonts

[Paul White (paulw2u)]

We are sorry that we do not always have the capacity to review all reported bugs in a timely manner. You reported this bug some time ago and there have been many changes in Ubuntu and Chromium since that time.

Upstream bug https://bugs.chromium.org/p/chromium/issues/detail?id=586898 was closed in 2017 due to non-activity. Do you still see a problem related to the one that you reported using currently supported versions of Chromium and Ubuntu? Please let us know if you do and in which version of Ubuntu otherwise this report can be left to expire in approximately 60 days time.

Thank you for helping make Ubuntu better.

Paul White
[Ubuntu Bug Squad]

[Launchpad Janitor (janitor)]

[Expired for chromium-browser (Ubuntu) because there has been no activity for 60 days.]