Closed
Bug 1116104
Opened 9 years ago
Closed 9 years ago
crash in AdjustAppendParentForAfterContent
Categories
(Core :: Layout, defect)
Core
Layout
Tracking
()
RESOLVED
FIXED
mozilla37
People
(Reporter: martijn.martijn, Assigned: MatsPalmgren_bugz)
References
Details
(Keywords: crash, regression, testcase)
Crash Data
Attachments
(2 files)
167 bytes,
text/html
|
Details | |
2.20 KB,
patch
|
roc
:
review+
|
Details | Diff | Splinter Review |
See testcase, which crashes in current trunk build. Could this be a regression from bug 508665? This bug was filed from the Socorro interface and is report bp-389ddc57-2647-4e89-82ff-69c9b2141229. ============================================================= 0 XUL AdjustAppendParentForAfterContent layout/base/nsLayoutUtils.cpp 1 XUL nsCSSFrameConstructor::GetInsertionPrevSibling(nsCSSFrameConstructor::InsertionPoint*, nsIContent*, bool*, bool*, nsIContent*, nsIContent*) layout/base/nsCSSFrameConstructor.cpp 2 XUL nsCSSFrameConstructor::ContentRangeInserted(nsIContent*, nsIContent*, nsIContent*, nsILayoutHistoryState*, bool) layout/base/nsCSSFrameConstructor.cpp 3 XUL nsCSSFrameConstructor::RecreateFramesForContent(nsIContent*, bool, nsCSSFrameConstructor::RemoveFlags, nsIContent**) layout/base/nsCSSFrameConstructor.cpp 4 XUL mozilla::RestyleManager::ProcessRestyledFrames(nsStyleChangeList&) layout/base/RestyleManager.cpp 5 XUL mozilla::RestyleManager::ComputeAndProcessStyleChange(nsIFrame*, nsChangeHint, mozilla::RestyleTracker&, nsRestyleHint) layout/base/RestyleManager.cpp 6 XUL mozilla::RestyleManager::RestyleElement(mozilla::dom::Element*, nsIFrame*, nsChangeHint, mozilla::RestyleTracker&, nsRestyleHint) layout/base/RestyleManager.cpp 7 XUL mozilla::RestyleTracker::ProcessOneRestyle(mozilla::dom::Element*, nsRestyleHint, nsChangeHint) layout/base/RestyleTracker.cpp 8 XUL mozilla::RestyleTracker::DoProcessRestyles() layout/base/RestyleTracker.cpp 9 XUL mozilla::RestyleManager::ProcessPendingRestyles() layout/base/RestyleTracker.h 10 XUL PresShell::FlushPendingNotifications(mozilla::ChangesToFlush) layout/base/nsPresShell.cpp
Assignee | ||
Comment 1•9 years ago
|
||
(In reply to Martijn Wargers [:mwargers] (QA) from comment #0) > Could this be a regression from bug 508665? That seems likely. (gdb) #1 0x00007ffff063dd75 in AdjustAppendParentForAfterContent (...) 6073 parent = nsLayoutUtils::LastContinuationWithChild(do_QueryFrame(child)); (gdb) p child $1 = (nsIFrame *) 0x7fffb1efb4c8 (gdb) p child->DumpFrameTreeLimited() TableCol(colgroup)(1)@7fffb1efb4c8 {0,0,0,0} [state=0000000020000402] [content=7fffafc4c550] [sc=7fffb1efb420:-moz-table-column] nsTableColFrame isn't a nsContainerFrame, so do_QueryFrame returns null.
Assignee | ||
Comment 2•9 years ago
|
||
https://tbpl.mozilla.org/?tree=Try&rev=7207675497bd
Assignee: nobody → mats
Attachment #8542190 -
Flags: review?(roc)
Assignee | ||
Updated•9 years ago
|
QA Contact: mats
Attachment #8542190 -
Flags: review?(roc) → review+
Assignee | ||
Comment 3•9 years ago
|
||
https://hg.mozilla.org/integration/mozilla-inbound/rev/31b943721eba
Flags: in-testsuite+
https://hg.mozilla.org/mozilla-central/rev/31b943721eba
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla37
You need to log in
before you can comment on or make changes to this bug.
Description
•