Bug 239000

Summary:

U+0622 + U+064E crash browser: "a problem repeatedly occurred"

Product:

WebKit

Reporter:

mustafa.0x

Component:

Layout and Rendering

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED CONFIGURATION CHANGED

Severity:

Normal

CC:

ap, bfulgham, simon.fraser, zalan

Priority:

Version:

Safari Technology Preview

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
screenshot	none

mustafa.0x

Reported 2022-04-08 07:50:14 PDT

``` <meta charset=utf-8> آَ ``` Release 142 (Safari 15.4, WebKit 17614.1.5.16) This combo is a typo, but even so, a browser crash is unwarranted. Similar combos may also cause crashes.

Attachments
screenshot (12.66 KB, image/png) 2022-04-08 11:46 PDT, mustafa.0x	no flags	Details
View All Add attachment proposed patch, testcase, etc.

alan

Comment 1 2022-04-08 08:39:14 PDT

Thanks for reporting this issue. Unfortunately I am not able to reproduce the crash by just copy-pasting the "آَ" content and neither by constructing a test case by using the associated HTML entities (ََ etc). Would you mind attaching the actual markup that reproduces this crash, please? Thanks!

mustafa.0x

Comment 2 2022-04-08 08:44:05 PDT

It seems that you didn't copy the <meta> tag as well. Copy and paste this in the address bar: data:text/html,<meta charset=utf-8>آَ

Simon Fraser (smfr)

Comment 3 2022-04-08 09:41:27 PDT

What OS version are you reproducing this on? Can you find a crash log (via Console.app) and attach it?

mustafa.0x

Comment 4 2022-04-08 11:46:51 PDT

Created attachment 457104 [details] screenshot Occurs on macOS 12.2 and also on iOS 15. It doesn't crash the browser, just the renderer. Here's a codepen: https://codepen.io/mustafa0x/pen/QWarrZe

Alexey Proskuryakov

Comment 5 2022-04-08 14:35:58 PDT

This is the same stack trace as rdar://87542346, which got fixed in macOS 12.3. I can reproduce on macOS 12.2.1 byt simply opening this bugzilla page. The fix was not in WebKit, but in underlying system frameworks.

Note You need to log in before you can comment on or make changes to this bug.