Closed Bug 393822 Opened 17 years ago Closed 17 years ago

Crash [@ nsTextFrame::EnsureTextRun] with rtl

Categories

(Core :: Graphics, defect)

x86
macOS
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: jruderman, Unassigned)

References

Details

(Keywords: crash, rtl, testcase)

Crash Data

Attachments

(1 file)

Loading the testcase makes Firefox crash with a null dereference [@ nsTextFrame::EnsureTextRun].

The testcase looks pretty simple and harmless.  Aside from dir="rtl", the testcase is just sticking a simple inline element in a block and removing it.

I think there's some unnecessary wrapping, too.  Before the crash, 'G' appears on a separate line from 'h' unnecessarily.
This doesn't crash for me in today's build. Could it have been fixed by bug 382429?
No longer crashes for me.
Status: NEW → RESOLVED
Closed: 17 years ago
Resolution: --- → WORKSFORME
Crashtest checked in.
Flags: in-testsuite+
Mass-assigning the new rtl keyword to RTL-related (see bug 349193).
Keywords: rtl
Crash Signature: [@ nsTextFrame::EnsureTextRun]
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: