Closed
Bug 1144641
Opened 9 years ago
Closed 7 years ago
crash in nsTableFrame::FixupPositionedTableParts with vertical writing mode
Categories
(Core :: Layout, defect)
Core
Layout
Tracking
()
RESOLVED
WORKSFORME
People
(Reporter: jfkthame, Unassigned)
References
Details
(Keywords: testcase)
Attachments
(1 file)
|
1.81 KB,
text/html
|
Details |
Running the testcase from gfx/tests/crashtests/783041-2.html with writing-mode:vertical-lr applied to the <body> element will generate a number of assertions, then crash in nsTableFrame::FixupPositionedTableParts. Although we don't yet implement vertical layout for table elements (and therefore some assertions here are not surprising), we should at least avoid crashing.
|
Reporter | |
Comment 1•9 years ago
|
||
Testcase created by adding vertical writing mode to the original gfx crashtest. NB: crashes a current trunk build if writing-mode support is enabled.
|
|
Reporter | |
Comment 2•9 years ago
|
||
Assertions we hit when loading this testcase include: 0:26.47 [32686] ###!!! ASSERTION: Table width is less than the sum of its columns' min widths: '!(aWidthType == BTLS_FINAL_WIDTH && aWidth < guess_min)', file layout/tables/BasicTableLayoutStrategy.cpp, line 816 0:26.63 [32686] ###!!! ASSERTION: didn't subtract all that we added: '(space == 0 || space == nscoord_MAX) && ((l2t == FLEX_PCT_LARGE) ? (-0.001f < basis.f && basis.f < 0.001f) : (basis.c == 0 || basis.c == nscoord_MAX))', file layout/tables/BasicTableLayoutStrategy.cpp, line 1061 0:26.78 [32686] ###!!! ASSERTION: Shouldn't be incomplete if availableBSize is UNCONSTRAINED.: 'aReflowState.AvailableBSize() != NS_UNCONSTRAINEDSIZE', file layout/generic/nsBlockFrame.cpp, line 1570 0:26.87 [32686] ###!!! ASSERTION: frame tree not empty, but caller reported complete status: 'aSubtreeRoot->GetPrevInFlow()', file layout/base/nsLayoutUtils.cpp, line 6876 0:27.56 [32686] ###!!! ASSERTION: frame tree not empty, but caller reported complete status: 'start == end || IsInLetterFrame(aSubtreeRoot)', file layout/base/nsLayoutUtils.cpp, line 6890 0:26.47 [32686] ###!!! ASSERTION: Table width is less than the sum of its columns' min widths: '!(aWidthType == BTLS_FINAL_WIDTH && aWidth < guess_min)', file layout/tables/BasicTableLayoutStrategy.cpp, line 816 0:26.63 [32686] ###!!! ASSERTION: didn't subtract all that we added: '(space == 0 || space == nscoord_MAX) && ((l2t == FLEX_PCT_LARGE) ? (-0.001f < basis.f && basis.f < 0.001f) : (basis.c == 0 || basis.c == nscoord_MAX))', file layout/tables/BasicTableLayoutStrategy.cpp, line 1061
Pushed by mpalmgren@mozilla.com: https://hg.mozilla.org/integration/mozilla-inbound/rev/e3f73fdc82af Add a crashtest.
|
||
Comment 6•7 years ago
|
||
The test was green on Try so I pushed it and calling this WFM.
|
||
Comment 7•7 years ago
|
||
| bugherder | ||
https://hg.mozilla.org/mozilla-central/rev/e3f73fdc82af
You need to log in
before you can comment on or make changes to this bug.
Description
•