Closed
Bug 135368
Opened 23 years ago
Closed 23 years ago
crash on combination: absolute positioning + form + missing <td>
Categories
(Core :: Layout: Tables, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 130251
People
(Reporter: danifanny, Assigned: karnaze)
References
()
Details
(Keywords: crash)
Attachments
(2 files)
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:0.9.9+) Gecko/20020403
BuildID: 2002040314
HTML pages with the following conditions crash:
- table with a style attribute specifying absolute positioning.
- one row (<tr>) with no cell (<td>) specified within it.
- the row contains a form.
Note that combining any two of the above conditions is not enough. This means
that by taking the style attribute out of the table, adding a <td> to the form,
or taking the form out you can avoid the crash.
Reproducible: Always
Steps to Reproduce:
1.Start the browser
2.Go to www.vbug.co.uk/magazine/i6/tricks_of_the_trade.asp
3.Watch browser crash
Actual Results: Browser crashes.
Expected Results: Browser renders page.
Minimal HTML snippet demonstrating the problem:
<html>
<body>
<table style="position: absolute;">
<tr>
<form>
inside the form
</form>
</tr>
</table>
</body>
</html>
Comment 1•23 years ago
|
||
can see this in linux trunk #2002040302
maybe a dupe but will check after(and if) i can get a stack trace
Severity: normal → major
Status: UNCONFIRMED → NEW
Component: DOM Style → HTMLTables
Ever confirmed: true
OS: Windows 98 → All
Comment 3•23 years ago
|
||
Comment 4•23 years ago
|
||
sounds like bug 130251
both crash in the same place and both test cases have position: absolute
Comment 5•23 years ago
|
||
<table style="position: absolute;"><tr><form> is a shorter testcase.
reporter, it's usually best to attach testcases and not inline them.
Comment 6•23 years ago
|
||
Comment 7•23 years ago
|
||
same assert and stack as bug 130251
nsSpaceManager::GetTranslation(int & 0, int & 0) line 192 + 13 bytes
nsBlockBandData::Init(nsSpaceManager * 0x00000000, const nsSize & {...}) line 74
nsBlockReflowState::nsBlockReflowState(const nsHTMLReflowState & {...},
nsIPresContext * 0x052d8058, nsBlockFrame * 0x052b1390, const
nsHTMLReflowMetrics & {...}, int 0) line 151
nsBlockFrame::Reflow(nsBlockFrame * const 0x052b1390, nsIPresContext *
0x052d8058, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...},
unsigned int & 4) line 735
nsContainerFrame::ReflowChild(nsIFrame * 0x052b1390, nsIPresContext *
0x052d8058, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0,
int 0, unsigned int 0, unsigned int & 4) line 783 + 31 bytes
nsTableRowFrame::ReflowChildren(nsTableRowFrame * const 0x052b1190,
nsIPresContext * 0x052d8058, nsHTMLReflowMetrics & {...}, const
nsHTMLReflowState & {...}, nsTableFrame & {...}, unsigned int & 0, int 0) line
1119
nsTableRowFrame::Reflow(nsTableRowFrame * const 0x052b1190, nsIPresContext *
0x052d8058, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...},
unsigned int & 0) line 1444 + 37 bytes
nsContainerFrame::ReflowChild(nsIFrame * 0x052b1190, nsIPresContext *
0x052d8058, nsHTMLReflowMetrics & {...}, const nsHTMLReflowState & {...}, int 0,
int 0, unsigned int 0, unsigned int & 0) line 783 + 31 bytes
nsTableRowGroupFrame::ReflowChildren(nsTableRowGroupFrame * const 0x053383ac,
nsIPresContext * 0x052d8058, nsHTMLReflowMetrics & {...}, nsRowGroupReflowState
& {...}, unsigned int & 0, nsTableRowFrame * 0x00000000, int 0, nsTableRowFrame
* * 0x00000000, int * 0x0012df98) line 446 + 45 bytes
nsTableRowGroupFrame::Reflow(nsTableRowGroupFrame * const 0x053383ac,
nsIPresContext * 0x052d8058, nsHTMLReflowMetrics & {...}, const
nsHTMLReflowState & {...}, unsigned int & 0) line 1212 + 35 bytes
nsContainerFrame::ReflowChild(nsIFrame * 0x053383ac, nsIPresContext *
0x052d8058, nsHTMLReflowMetrics & {...}, const ns
*** This bug has been marked as a duplicate of 130251 ***
Status: NEW → RESOLVED
Closed: 23 years ago
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•