Using version 4.10.0git-5551513d when I visit a website like http://www.huobi.com/ with Firefox, xfce4-panel crashes probably due to the fact, that the window title (and thus the panel button) gets renamed to the title of the website containing chinese letters. Terminal output is:
I'm not sure if this error message is related to the problem.
I can reproduce the issue by creating a webpage with the following characters in the page title:
¯\_(ツ)_/¯
When loading the page in either Firefox or Chrome, the window and button title is set to include those characters, and xfce4-panel will crash as a result.
This seems rather high-priority to me - it's effectively a remote DoS vulnerability, and may be indicative of a more serious issue.
Further clarification: My architecture is x86_64, typo on my end.
Furthermore, somebody else is reporting to me that the issue does NOT occur for them; neither my test case, nor the Huobi case. They are using Arch Linux on x86 (32-bits), also with xfce4-panel 4.10.1 - according to them, the system hasn't been updated for several months, so it may be out of date in some other way.
Not sure whether this may be useful in any way, but the hash of their xfce4-panel binary is:
I can confirm this bug with a completely up2date Arch x64. It happened to me when visiting the following page containing the famous "tableflip" emoji (╯°□°)╯ ┻━┻: http://imgur.com/gallery/7oXkt5I
I had the same issue on Arch Linux (4.0.4-3-ck) when opening an imgur post containing "香山" in the title (http://imgur.com/gallery/AvXnJ). Installing ttf-droid, as Anthony suggested, worked around the issue.
This issue is still occurring, also with Korean and emoji characters, even with ttf-droid and ttf-dejavu fonts installed. I needed to add noto fonts in order to prevent new crashes.