Closed
Bug 114234
Opened 23 years ago
Closed 23 years ago
CantRenderReplacedElement causes access to deleted frames
Categories
(Core :: Layout, defect, P2)
Tracking
()
RESOLVED
FIXED
Future
People
(Reporter: dbaron, Assigned: dbaron)
References
Details
Attachments
(1 file)
|
776 bytes,
patch
|
Details | Diff | Splinter Review |
CantRenderReplacedElement leads to access to deleted frames. When I load the
test in the block regression tests for bug 7993, I see us accessing a deleted
frame while handling the CantRenderReplacedElementEvent (see bug 114219), and
before that I see the assertion in nsFrameManager that's in the patch in bug
114220.
The patch I'm about to attach fixes the assertion and the crash once you have
the patch in bug 114219.
|
Assignee | |
Comment 1•23 years ago
|
||
meant to assign to self
Assignee: attinasi → dbaron
Severity: normal → critical
Priority: -- → P2
Target Milestone: --- → mozilla0.9.8
|
|
Assignee | |
Comment 2•23 years ago
|
||
|
|
Assignee | |
Updated•23 years ago
|
Status: NEW → ASSIGNED
|
|
Assignee | |
Updated•23 years ago
|
Target Milestone: mozilla0.9.8 → mozilla0.9.9
|
|
Assignee | |
Updated•23 years ago
|
Target Milestone: mozilla0.9.9 → Future
|
|
Assignee | |
Comment 3•23 years ago
|
||
The above patch is included in the patch I just attached to bug 118014.
|
|
Assignee | |
Comment 4•23 years ago
|
||
Fix checked in as part of attachment 73740 [details] [diff] [review] on bug 118014, 2002-03-13 05:51 PST.
Status: ASSIGNED → RESOLVED
Closed: 23 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•