Internet Explorer does not work with valid @font-face{ src:local() } in user-provided CSS and it crashes.

Issue #4313228 • Assigned to Christian F.

Details

Created
Aug 20, 2015
Privacy
This issue is public.
Reports
Reported by 1 person

Sign in to watch or report this issue.

Steps to reproduce

URL:

Repro Steps:

STEPS TO REPRO

  1. [Control Panel] - [Intenet Options] to open “Internet Properites” control panel.
  2. On “Internet Properites” control panel, click [Accessibility] button on [General] tab.
  3. On “Accessibility” dialog - “User style sheet” section, enable [Format documents using my style sheet].
    -> [Browse] button is enabled.
  4. Click [Browse] button and select userContent.css (file attached).
    -> Now your screen must look like option.png (file attached).
  5. Click [OK] button to close “Accessibility” dialog.
  6. Click [OK] button to close “Internet Properties” control panel.
  7. Open Internet Explorer.
    -> IE crashes.

EXPECTED

  • IE does not crash.
  • Opening test.html (file attached) on IE draws the characters in Cambria instead of Calibri.

ENVIRONMENT

  • IE 11 on Windows 8.1 x86
  • IE 11 on Windows 10 x64

REFERENCE

Expected Results:

  • IE does not crash.
  • IE draws the characters in the font specified by @font-face{ src:local() } in the user-provided CSS.

Actual Results:

Dev Channel specific:

No

Attachments

1 attachment

Comments and activity

  • Microsoft Edge Team

    Changed Assigned To to “Christian F.”

    Changed Assigned To to “Rossen A.”

    Changed Assigned To to “Christian F.”

  • Still repro on IE 11 on Windows 10 x64.

    (184c.1288): Access violation - code c0000005 (first chance)
    First chance exceptions are reported before any exception handling.
    This exception may be expected and handled.
    MSHTML!CElement::GetMarkupPtr+0x6:
           00007ff9`e1a62e06 8b413c          mov     eax,dword ptr [rcx+3Ch] ds:00000000`0000003c=????????
    1:021> kc
     # Call Site
    00 MSHTML!CElement::GetMarkupPtr
    01 MSHTML!CFontFace::CFontFace
    02 MSHTML!CFontFace::Create
    03 MSHTML!CStyleSheet::AppendFontFace
    04 MSHTML!CSSIE10Parser::HandleAtFontFace
    05 MSHTML!CSSIE10Parser::Write
    06 MSHTML!BaseCSSParser::LoadFromStream
    07 MSHTML!BaseCSSParser::LoadFromFile
    08 MSHTML!EnsureUserStyleSheets
    09 MSHTML!CDoc::EnsureUserStyleSheets
    0a MSHTML!CElement::ProcessPeerTask
    0b MSHTML!CElement::EnterTree
    0c MSHTML!CElement::Notify
    0d MSHTML!CHtmlElement::Notify
    0e MSHTML!CHtmRootParseCtx::FlushNotifications
    0f MSHTML!CHtmRootParseCtx::Finish
    10 MSHTML!CHtmRootParseCtxRouter::Finish
    11 MSHTML!CHtml5Parse::Finish
    12 MSHTML!CHtmPost::Broadcast
    13 MSHTML!CHtmPost::Exec
    14 MSHTML!CHtmPost::Run
    15 MSHTML!PostManExecute
    16 MSHTML!PostManResume
    17 MSHTML!CHtmPost::OnDwnChanCallback
    18 MSHTML!CDwnChan::OnMethodCall
    19 MSHTML!GlobalWndOnMethodCall
    1a MSHTML!GlobalWndProc
    1b USER32!UserCallWinProcCheckWow
    1c USER32!DispatchMessageWorker
    1d IEFRAME!CTabWindow::_TabWindowThreadProc
    1e IEFRAME!LCIETab_ThreadProc
    1f iertutil!_IsoThreadProc_WrapperToReleaseScope
    20 KERNEL32!BaseThreadInitThunk
    21 ntdll!RtlUserThreadStart
    

You need to sign in to your Microsoft account to add a comment.

Sign in