Open Bug 1401829 Opened 8 years ago Updated 3 years ago

Hit MOZ_CRASH(unexpected child list) at /builds/worker/workspace/build/src/layout/generic/nsBlockFrame.cpp:5360

Categories

(Core :: Layout: Block and Inline, defect, P3)

Product:
Core
Component:
Layout: Block and Inline
Type:
defect

Tracking

()

Tracking Flags:
Tracking Status
firefox57 --- wontfix
firefox58 --- affected

People

(Reporter: jkratzer, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: assertion, testcase)

Attachments

(2 files)

trigger.html
720 bytes, text/html
Details
log_minidump.txt
92.07 KB, text/plain
Details
Attached file trigger.html —
Testcase found while fuzzing mozilla-central rev f8dd3f21e434.
Flags: in-testsuite?
Attached file log_minidump.txt —
Minidump stacktrace
status-firefox57: --- → wontfix
status-firefox58: --- → affected
Priority: -- → P3
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: