Open Bug 1472563 Opened 6 years ago Updated 2 years ago

ASSERTION: aOffset out of range: 'aOffset && *aOffset <= 1'

Categories

(Core :: DOM: Selection, defect, P4)

defect

Tracking

()

People

(Reporter: MatsPalmgren_bugz, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: assertion, testcase)

Attachments

(2 files)

Attached file Testcase
###!!! ASSERTION: aOffset out of range: 'aOffset && *aOffset <= 1', file layout/generic/nsContainerFrame.cpp, line 415
Attached patch crashtest patchSplinter Review
BTW, the testcase is a slightly modified testcase from bug 804927
that I tried to land as a crashtest.  Here's the patch to do so
once this bug is fixed.
Assignee: nobody → mats
Assignee: mats → nobody

Mats, should we close this bug?

Type: enhancement → defect
Flags: needinfo?(mats)

No, the testcase still triggers the reported assertion.

Flags: needinfo?(mats)

The assertion is still violated with current Nightly. After a brief analysis, I suspect the problem may be in Selection::GetPrimaryFrameForFocusNode.

Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: