Closed Bug 135368 Opened 23 years ago Closed 23 years ago

crash on combination: absolute positioning + form + missing <td>

Categories

(Core :: Layout: Tables, defect)

x86
All
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 130251

People

(Reporter: danifanny, Assigned: karnaze)

References

()

Details

(Keywords: crash)

Attachments

(2 files)

From Bugzilla Helper: User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:0.9.9+) Gecko/20020403 BuildID: 2002040314 HTML pages with the following conditions crash: - table with a style attribute specifying absolute positioning. - one row (<tr>) with no cell (<td>) specified within it. - the row contains a form. Note that combining any two of the above conditions is not enough. This means that by taking the style attribute out of the table, adding a <td> to the form, or taking the form out you can avoid the crash. Reproducible: Always Steps to Reproduce: 1.Start the browser 2.Go to www.vbug.co.uk/magazine/i6/tricks_of_the_trade.asp 3.Watch browser crash Actual Results: Browser crashes. Expected Results: Browser renders page. Minimal HTML snippet demonstrating the problem: <html> <body> <table style="position: absolute;"> <tr> <form> inside the form </form> </tr> </table> </body> </html>
can see this in linux trunk #2002040302 maybe a dupe but will check after(and if) i can get a stack trace
Severity: normal → major
Status: UNCONFIRMED → NEW
Component: DOM Style → HTMLTables
Ever confirmed: true
OS: Windows 98 → All
forgot to reassing to owner
Assignee: jst → karnaze
QA Contact: ian → amar
Severity: major → critical
Keywords: crash
sounds like bug 130251 both crash in the same place and both test cases have position: absolute
<table style="position: absolute;"><tr><form> is a shorter testcase. reporter, it's usually best to attach testcases and not inline them.
Attached file minimal testcase
Depends on: 130251
same assert and stack as bug 130251 nsSpaceManager::GetTranslation(int & 0, int & 0) line 192 + 13 bytes nsBlockBandData::Init(nsSpaceManager * 0x00000000, const nsSize & {...}) line 74 nsBlockReflowState::nsBlockReflowState(const nsHTMLReflowState & {...}, nsIPresContext * 0x052d8058, nsBlockFrame * 0x052b1390, const nsHTMLReflowMetrics & {...}, int 0) line 151 nsBlockFrame::Reflow(nsBlockFrame * const 0x052b1390, nsIPresContext * 0x052d8058, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 4) line 735 nsContainerFrame::ReflowChild(nsIFrame * 0x052b1390, nsIPresContext * 0x052d8058, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0, int 0, unsigned int 0, unsigned int & 4) line 783 + 31 bytes nsTableRowFrame::ReflowChildren(nsTableRowFrame * const 0x052b1190, nsIPresContext * 0x052d8058, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, nsTableFrame & {...}, unsigned int & 0, int 0) line 1119 nsTableRowFrame::Reflow(nsTableRowFrame * const 0x052b1190, nsIPresContext * 0x052d8058, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0) line 1444 + 37 bytes nsContainerFrame::ReflowChild(nsIFrame * 0x052b1190, nsIPresContext * 0x052d8058, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0, int 0, unsigned int 0, unsigned int & 0) line 783 + 31 bytes nsTableRowGroupFrame::ReflowChildren(nsTableRowGroupFrame * const 0x053383ac, nsIPresContext * 0x052d8058, nsHTMLReflowMetrics & {...}, nsRowGroupReflowState & {...}, unsigned int & 0, nsTableRowFrame * 0x00000000, int 0, nsTableRowFrame * * 0x00000000, int * 0x0012df98) line 446 + 45 bytes nsTableRowGroupFrame::Reflow(nsTableRowGroupFrame * const 0x053383ac, nsIPresContext * 0x052d8058, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, unsigned int & 0) line 1212 + 35 bytes nsContainerFrame::ReflowChild(nsIFrame * 0x053383ac, nsIPresContext * 0x052d8058, nsHTMLReflowMetrics & {...}, const ns *** This bug has been marked as a duplicate of 130251 ***
Status: NEW → RESOLVED
Closed: 23 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: