309456 - Crash with evil xforms testcase involving action and display:table-row

Status: RESOLVED WORKSFORME

(Core Graveyard :: XForms, defect)

Description

[Martijn Wargers (dead)]

The following testcase crashes/hangs for me when clicking on the button most of
the time:

Talkback ID: TB9574814G
nsSVGInnerSVGFrame::GetCanvasTM 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/svg/base/src/nsSVGInnerSVGFrame.cpp,
line 697]
nsTableFrame::SetInitialChildList 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/tables/nsTableFrame.cpp,
line 447]
nsTableFrame::AppendCell 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/tables/nsTableFrame.cpp,
line 983]
nsTableRowGroupFrame::Reflow 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/tables/nsTableRowGroupFrame.cpp,
line 1255]
nsFrameManager::GetPrimaryFrameFor 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/base/nsFrameManager.cpp,
line 352]
nsCSSFrameConstructor::ContentRemoved 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 9772]
nsCSSFrameConstructor::MaybeRecreateFramesForContent 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 11296]
UpdateViewsForTree 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 9917]
nsCSSFrameConstructor::ReframeContainingBlock 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 12985]
nsCSSFrameConstructor::RemoveFixedItems 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 13034]
CollectRestyles 
[c:/builds/tinderbox/Fx-Trunk/WINNT_5.2_Depend/mozilla/layout/base/nsCSSFrameConstructor.cpp,
line 13064]
0x778b0c24

Probably this crash disappears when bug 309445 gets fixed if xf:action would be
converted to use XBL.

Comment 1

[Martijn Wargers (dead)]

Attachment: testcase

Comment 2

[Martijn Wargers (dead)]

Testcase doesn't crash anymore, marking WFM.