Closed Bug 266445 Opened 20 years ago Closed 20 years ago

Crash [@ nsLineBox::DeleteLineList ]

Categories

(Core :: Layout, defect)

x86
Windows XP
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: robert.strong.bugs, Unassigned)

References

(Depends on 1 open bug)

Details

(Keywords: crash, testcase)

Crash Data

Attachments

(2 files)

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8a5) Gecko/20041027 Firefox/0.9.1+
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8a5) Gecko/20041027 Firefox/0.9.1+

The soon to be attached simplified testcase causes a crash @
nsLineBox::DeleteLineList - TB1571803M. Bug 203206 may be related though it
involves printing.

Reproducible: Always
Steps to Reproduce:
1. Open testcase

Actual Results:  
Crash

Expected Results:  
No crash

http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=2&type=iid&id=TB1571986X
Stack Signature	 0x0000021c ac39b586

As well as TB1571776H and TB1571803M with the following
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=2&type=iid&id=TB1571803M
Stack Signature	 nsLineBox::DeleteLineList 0026fdc9
Source File, Line No.
c:/builds/tinderbox/firefox/WINNT_5.0_Clobber/mozilla/layout/html/base/src/nsLineBox.cpp,
line 300
The attached testcase contains the following:
<HTML>
<HEAD>
</HEAD>
<BODY>
<BODY STYLE="overflow:hidden;">
<HR STYLE="float:right; padding:71155995130em;">
<OL STYLE="position:static;"><LI>Test</LI></OL>
</BODY>
</HTML>
Adding keywords crash and testcase.
Keywords: crash, testcase
Testcase WFM using:
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.3) Gecko/20041026
Firefox/1.0RC1
Confirming, crash with Mozilla 1.8a5 build 2004102805 on WinNT4. But TB doesn't
come up.
Also, on line 301 child = nextChild; in nsLineBox::DeleteLineList nextChild is
0xdddddddd
Depends on: 265084
Is this still an issue? The testcase doesn't crash for me in current trunk build...
This also works for me with build 2005-03-14-04 using Windows XP Seamonkey trunk.
Marking as such, since nobody sees this.
Status: NEW → RESOLVED
Closed: 20 years ago
Resolution: --- → WORKSFORME
Agreed - I can't reproduce or find the time to track down the checkin.
layout/base/crashtests/266445-1.html
http://hg.mozilla.org/mozilla-central/rev/b0337b6287f3
Flags: in-testsuite+
Crash Signature: [@ nsLineBox::DeleteLineList ]
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: