Closed
Bug 1674809
Opened 4 years ago
Closed 4 years ago
Assertion failure: !IsFramePartOfIBSplit(aParentFrame) || !GetIBSplitSibling(aParentFrame) || !GetIBSplitSibling(aParentFrame)->PrincipalChildList().FirstChild()
Categories
(Core :: Layout, defect)
Core
Layout
Tracking
()
RESOLVED
DUPLICATE
of bug 1466594
People
(Reporter: hdir.yassine, Unassigned)
References
(Blocks 1 open bug)
Details
Attachments
(1 file)
|
40.36 KB,
application/x-zip-compressed
|
Details |
User Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0
Steps to reproduce:
fuzzing using Grizzly
The test cases wasn't reduced yet, can some one please tell me how the Grizzly reducer work ?
Actual results:
Version 84.0a1
Build ID 20201028092421
User Agent Mozilla/5.0 (X11; Linux x86_64; rv:84.0) Gecko/20100101 Firefox/84.0
OS Linux 5.4.0-48-generic #52~18.04.1-Ubuntu SMP Thu Sep 10 12:50:22 UTC 2020
Actual results:
Assertion failure: !IsFramePartOfIBSplit(aParentFrame) || !GetIBSplitSibling(aParentFrame) || !GetIBSplitSibling(aParentFrame)->PrincipalChildList().FirstChild() (aParentFrame has a ib-split sibling with kids?), at /builds/worker/checkouts/gecko/layout/base/nsCSSFrameConstructor.cpp:5813
|
||
Updated•4 years ago
|
Group: firefox-core-security
Status: UNCONFIRMED → RESOLVED
Closed: 4 years ago
Component: Untriaged → Layout
Product: Firefox → Core
Resolution: --- → DUPLICATE
Version: 56 Branch → unspecified
You need to log in
before you can comment on or make changes to this bug.
Description
•