Closed
Bug 622466
Opened 14 years ago
Closed 13 years ago
"ASSERTION: invalid array index" with DOMSVGLengthList.removeItem
Categories
(Core :: SVG, defect)
Tracking
()
RESOLVED
INCOMPLETE
People
(Reporter: jruderman, Unassigned)
References
(Blocks 1 open bug)
Details
(Keywords: assertion)
Attachments
(1 file)
|
3.69 KB,
text/plain
|
Details |
Hit this with crossfuzz, don't know how to reproduce. ###!!! ASSERTION: invalid array index: 'i < Length()', file nsTArray.h, line 451
|
||
Comment 1•13 years ago
|
||
Does this still happen? I suspect jwatt's fixes to LengthList should have sorted this.
|
Reporter | |
Updated•13 years ago
|
Status: UNCONFIRMED → RESOLVED
Closed: 13 years ago
Resolution: --- → INCOMPLETE
You need to log in
before you can comment on or make changes to this bug.
Description
•