Bug 460954

Description of problem:

Liferea crashes when clicking a certain feed (it is
http://www.iwanihana.info/atom.xml, but it may rotate away with time).

Version-Release number of selected component (if applicable):

liferea-1.4.18-1.fc10.x86_64
cairo-1.7.4-1.fc10.x86_64
xulrunner-1.9.0.1-2.fc10.x86_64
pango-1.21.5-1.fc10.x86_64
gtk2-2.13.7-4.fc10.x86_64

How reproducible:

100% here, but may depend on desktop configuration

Steps to Reproduce:
1. Click to pre-subscribed iwanihana.info
  
Actual results:

Crash

Expected results:

No crash

Additional info:

Program received signal SIGSEGV, Segmentation fault.
_cairo_gstate_has_show_text_glyphs (gstate=<value optimized out>)
    at cairo-gstate.c:1511
1511        return _cairo_surface_has_show_text_glyphs (gstate->target);
(gdb) where
#0  _cairo_gstate_has_show_text_glyphs (gstate=<value optimized out>)
    at cairo-gstate.c:1511
#1  0x00007fedeb7cd51a in save_current_point (renderer=0x2255bc0)
    at pangocairo-render.c:713
#2  0x00007fedeb7cda7f in _pango_cairo_do_glyph_string (cr=0x3be9a5a9a0,
    font=0x226d800, glyphs=0x1c4d160, do_path=0) at pangocairo-render.c:741
#3  0x00007fedec0bfb68 in ?? () from /usr/lib64/libgdk-x11-2.0.so.0
#4  0x00007fedeb5a676e in pango_renderer_draw_glyphs (renderer=0x28130b0,
    font=0x226d800, glyphs=0x1c4d160, x=63488, y=68608) at pango-renderer.c:639
#5  0x00007fedeb5a66be in pango_renderer_draw_glyph_item (renderer=0x28130b0,
    text=0x27db1e0 "Aug 17 10:45 AM", glyph_item=0x307e240, x=63488, y=68608)
    at pango-renderer.c:703
#6  0x00007fedeb5a6eda in pango_renderer_draw_layout_line (renderer=0x28130b0,
    line=0x3063c00, x=63488, y=68608) at pango-renderer.c:568
#7  0x00007fedeb5a71ad in pango_renderer_draw_layout (renderer=0x28130b0,
    layout=<value optimized out>, x=63488, y=55296) at pango-renderer.c:192
#8  0x00007fedec0c14d5 in gdk_draw_layout_with_colors ()
   from /usr/lib64/libgdk-x11-2.0.so.0
#9  0x00007fedec0c17c2 in gdk_draw_layout ()
   from /usr/lib64/libgdk-x11-2.0.so.0
#10 0x00007fede266547e in gdk_rectangle_intersect ()
   from /usr/lib64/gtk-2.0/2.10.0/engines/libnodoka.so
#11 0x00007fedec5711f7 in gtk_paint_layout ()
   from /usr/lib64/libgtk-x11-2.0.so.0
#12 0x00007fedec402af2 in ?? () from /usr/lib64/libgtk-x11-2.0.so.0
#13 0x00007fedec3f9e7d in gtk_cell_renderer_render ()
   from /usr/lib64/libgtk-x11-2.0.so.0
#14 0x00007fedec61b907 in ?? () from /usr/lib64/libgtk-x11-2.0.so.0
#15 0x00007fedec61c7f1 in ?? () from /usr/lib64/libgtk-x11-2.0.so.0
#16 0x00007fedec5fbca9 in ?? () from /usr/lib64/libgtk-x11-2.0.so.0
#17 0x00007fedec5fcd15 in ?? () from /usr/lib64/libgtk-x11-2.0.so.0
#18 0x00007fedec4c9528 in ?? () from /usr/lib64/libgtk-x11-2.0.so.0
#19 0x00007fedeac897fd in g_closure_invoke () from /lib64/libgobject-2.0.so.0
#20 0x00007fedeaca0264 in ?? () from /lib64/libgobject-2.0.so.0
#21 0x00007fedeaca1b58 in g_signal_emit_valist ()
   from /lib64/libgobject-2.0.so.0
#22 0x00007fedeaca2213 in g_signal_emit () from /lib64/libgobject-2.0.so.0
#23 0x00007fedec634331 in ?? () from /usr/lib64/libgtk-x11-2.0.so.0
#24 0x00007fedec633f88 in gtk_widget_send_expose ()
   from /usr/lib64/libgtk-x11-2.0.so.0
#25 0x00007fedec4c6112 in gtk_main_do_event ()
   from /usr/lib64/libgtk-x11-2.0.so.0
#26 0x00007fedec0d7efa in ?? () from /usr/lib64/libgdk-x11-2.0.so.0
#27 0x00007fedec0d8058 in gdk_window_process_all_updates ()
   from /usr/lib64/libgdk-x11-2.0.so.0
#28 0x00007fedec4237af in ?? () from /usr/lib64/libgtk-x11-2.0.so.0
#29 0x00007fedec0b3e14 in ?? () from /usr/lib64/libgdk-x11-2.0.so.0
#30 0x00007fedea9d48c2 in g_main_context_dispatch ()
   from /lib64/libglib-2.0.so.0
#31 0x00007fedea9d805d in ?? () from /lib64/libglib-2.0.so.0
#32 0x00007fedea9d821b in g_main_context_iteration ()
   from /lib64/libglib-2.0.so.0
#33 0x0000003bead71321 in nsBaseAppShell::DoProcessNextNativeEvent (
    this=<value optimized out>, mayWait=<value optimized out>)
    at nsBaseAppShell.cpp:151
#34 0x0000003bead714d2 in nsBaseAppShell::OnProcessNextEvent (
    this=<value optimized out>, thr=<value optimized out>,
    mayWait=<value optimized out>, recursionDepth=<value optimized out>)
    at nsBaseAppShell.cpp:278
#35 0x0000003beae3b7cf in nsThread::ProcessNextEvent (
    this=<value optimized out>, mayWait=<value optimized out>,
    result=<value optimized out>) at nsThread.cpp:497
#36 0x0000003beae0d0fe in NS_ProcessPendingEvents_P (
    thread=<value optimized out>, timeout=<value optimized out>)
    at nsThreadUtils.cpp:180
#37 0x0000003bead715f4 in nsBaseAppShell::NativeEventCallback (
    this=<value optimized out>) at nsBaseAppShell.cpp:121
#38 0x0000003bead5bf40 in nsAppShell::EventProcessorCallback (
    source=<value optimized out>, condition=<value optimized out>,
    data=<value optimized out>) at nsAppShell.cpp:69
#39 0x00007fedea9d48c2 in g_main_context_dispatch ()
   from /lib64/libglib-2.0.so.0
#40 0x00007fedea9d805d in ?? () from /lib64/libglib-2.0.so.0
#41 0x00007fedea9d858d in g_main_loop_run () from /lib64/libglib-2.0.so.0
#42 0x00007fedec4c58d9 in gtk_main () from /usr/lib64/libgtk-x11-2.0.so.0
#43 0x000000000042ee93 in main (argc=1, argv=0x7ffff531c198) at main.c:293
(gdb) 

The component is approximate. The problem may be in XULrunner, Cairo,
or Pango. Please investigate, I have no clue how to find out.