1035248 - "ASSERTION: Unexpected call" in nsCSSFrameConstructor::ConstructTable with SVG mime type, dynamic { HTML element with display:table-column-group }

Status: RESOLVED FIXED

(Core :: Layout, defect)

Description

[Jesse Ruderman]

Attachment: testcase

###!!! ASSERTION: Unexpected call: 'aDisplay->mDisplay == 8 || aDisplay->mDisplay == 9', file layout/base/nsCSSFrameConstructor.cpp, line 1959

This testcase seems like a dynamic version of bug 1016145.

Comment 1

[Jesse Ruderman]

Attachment: stack

Comment 2

[Lawrence Mandel [:lmandel] (use needinfo)]

Jet has requested a regression range. Marking QAWANTED.

Comment 3

[Boris Zbarsky [:bzbarsky]]

This is almost certainly a regression from bug 1013936, no?  That's why it has the dependency marked.

Comment 4

[Lawrence Mandel [:lmandel] (use needinfo)]

I spoke with Jet about this bug offline. In his opinion, this isn't important enough to track. As such, dropping tracking.

Comment 5

[Jesse Ruderman]

Attachment: testcase 2

###!!! ASSERTION: Unexpected call: 'aDisplay->mDisplay == 8 || aDisplay->mDisplay == 9', file layout/base/nsCSSFrameConstructor.cpp, line 1982

###!!! ASSERTION: How did this produce an nsTableRowGroupFrame?: 'Not Reached', file layout/tables/nsTableFrame.cpp, line 2747

Comment 6

[Boris Zbarsky [:bzbarsky]]

Attachment: Fix SVG document bits to correctly handle non-SVG elements being added

Comment 7

[Jonathan Watt [:jwatt]]

Comment on attachment 8591712 [details] [diff] [review]
Fix SVG document bits to correctly handle non-SVG elements being added

Review of attachment 8591712 [details] [diff] [review]:
-----------------------------------------------------------------

Ah, makes sense, thanks bz!

Comment 8

[Boris Zbarsky [:bzbarsky]]

https://hg.mozilla.org/integration/mozilla-inbound/rev/b488a6f9ddc2

Comment 9

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/b488a6f9ddc2