Closed
Bug 722137
Opened 12 years ago
Closed 12 years ago
"ASSERTION: Invalid offset" with RLE, astral char, wrapping
Categories
(Core :: Layout: Text and Fonts, defect)
Core
Layout: Text and Fonts
Tracking
()
RESOLVED
FIXED
mozilla12
Tracking | Status | |
---|---|---|
firefox-esr10 | --- | unaffected |
People
(Reporter: jruderman, Assigned: smontagu)
References
Details
(Keywords: assertion, testcase)
Attachments
(4 files)
293 bytes,
text/html
|
Details | |
5.82 KB,
text/plain
|
Details | |
1.61 KB,
patch
|
roc
:
review+
|
Details | Diff | Splinter Review |
1.09 KB,
patch
|
roc
:
review+
|
Details | Diff | Splinter Review |
###!!! ASSERTION: Invalid offset: 'aOffset <= mSkipChars->mCharCount', file gfx/thebes/gfxSkipChars.cpp, line 92 ###!!! ASSERTION: Text run does not map enough text for our reflow: 'gfxSkipCharsIterator(iter).ConvertOriginalToSkipped(offset + length) <= mTextRun->GetLength()', file layout/generic/nsTextFrameThebes.cpp, line 7399
Reporter | ||
Comment 1•12 years ago
|
||
Assignee | ||
Comment 2•12 years ago
|
||
The patch from bug 698335 should have used GetNextInFlow instead of GetNextSibling.
Attachment #592784 -
Flags: review?(roc)
Assignee | ||
Comment 3•12 years ago
|
||
Assignee: nobody → smontagu
Attachment #592785 -
Flags: review?(roc)
Attachment #592784 -
Flags: review?(roc) → review+
Attachment #592785 -
Flags: review?(roc) → review+
Assignee | ||
Comment 4•12 years ago
|
||
https://hg.mozilla.org/integration/mozilla-inbound/rev/159c690b5aa5 https://hg.mozilla.org/integration/mozilla-inbound/rev/7b5995e5d551
Flags: in-testsuite+
OS: Mac OS X → All
Hardware: x86_64 → All
Target Milestone: --- → mozilla12
Comment 5•12 years ago
|
||
https://hg.mozilla.org/mozilla-central/rev/159c690b5aa5 https://hg.mozilla.org/mozilla-central/rev/7b5995e5d551
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
Updated•12 years ago
|
status-firefox-esr10:
--- → unaffected
Updated•12 years ago
|
Depends on: CVE-2013-1676
Updated•11 years ago
|
Group: core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•