Open Bug 1257766 Opened 8 years ago Updated 2 years ago

"ASSERTION: Shouldn't return empty rect" with CSS filter

Categories

(Core :: Layout, defect)

Product:
Core
Component:
Layout
Type:
defect

Tracking

()

Tracking Flags:
Tracking Status
firefox48 --- affected

People

(Reporter: jruderman, Unassigned)

References

Details

(Keywords: assertion, testcase)

Attachments

(2 files)

testcase
450 bytes, text/html
Details
stack
11.43 KB, text/plain
Details
Attached file testcase — 
###!!! ASSERTION: Shouldn't return empty rect: '!mTmp.IsEmpty()', file nsRegion.h, line 375
Attached file stack — 

    
    

    
  
The box has x1 = -180, x2 = 2147483580, so when it's converted to a rect the width is x2-x1 = 2147483580 + 180, which overflows negative since these are signed 32 bit ints. And negative widths are interpreted as empty.

    
  
Assignee: nobody → cku

    
  
Assignee: cku → nobody

    
  
Severity: normal → S3

          You need to log in
          before you can comment on or make changes to this bug.
        






  

    
  







  

    

      
Attachment

      

      
      
      
      
    

    

      

        

          

            
General

            

              Creator: 



            

            
Created: 

            
Updated: 

            
Size: