282135 - layout should survive dynamic mangleme

Status: RESOLVED WORKSFORME

(Core :: Layout, defect)

Description

[Bernd]

The attached testcase does not survive even 10 sec. on my debug build.

Comment 1

[Bernd]

Attachment: testcase (runs till it crashes)

Comment 2

[Andrew Schultz]

if I remove table-caption (bug 281527) and table-column-group (bug 282172) from
the testcase, I no longer crash...

Comment 3

[Hermann Schwab]

Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8b) Gecko/20050213
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=2&type=iid&id=TB3687722K
11 crashes found where the Stack Signature contains 'processpseudoframe
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=1&searchby=stacksig&match=contains&searchfor=%09+ProcessPseudoFrame&vendor=All&product=All&platform=All&buildid=&sdate=&stime=&edate=&etime=&sortby=bbid

I crashed when loading the attachment, on win98 and Win98SE.
After reading comment 2, I edited a local copy and removed table-caption,
table-column-group or both. I tested each for minutes, only the original
containing both crashed immediately, also tested locally.

Comment 4

[Jesse Ruderman]

Ran for a minute and didn't see any crashes with Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8) Gecko/20051104 Firefox/1.5.

See also bug 306939.

Comment 5

[Bernd]

Jesse thats a cheap teaser ;-) , isn't it. Please put [e-mail] on CC for  bugs that you refer to.