Closed Bug 326495 Opened 19 years ago Closed 18 years ago

[FIX] Conditional SVG with display: -moz-inline-stack crashes Firefox [@ nsIFrame::GetParent]

Categories

(Core :: SVG, defect, P3)

Product:
Core
Component:
SVG
Type:
defect

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla1.9alpha1

People

(Reporter: jruderman, Assigned: bzbarsky)

References

Details

(Keywords: crash, testcase)

Crash Data

Attachments

(3 files, 1 obsolete file)

testcase
414 bytes, image/svg+xml
Details
stack trace
3.58 KB, text/plain
Details
Er, the real fix
1.27 KB, patch
sicking
: review+
tor
: superreview+
Details | Diff | Splinter Review 
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20060208 Firefox/1.6a1

Debug builds crash at nsIFrame::GetParent, while trying to evaluate an assertion failure.  Opt builds crash too, but I don't know where.
Attached image testcase — 
This testcase uses JavaScript because the crash is more reliable that way.  A page with inline style and no script can crash too.
Attached file stack trace — 

    
    

    
  
This is a regression from bug 303018
Blocks: 303018

    
    

    
  

      
      
      
      

        Attached patch
          
          
        Fix (obsolete)
        — 
          — Splinter Review
      

    


  

        Attachment #211220 -
        Flags: superreview?

        Attachment #211220 -
        Flags: review?(bugmail)

    
    

    
  

      
      
      
      

        Attached patch
          
          
        Er, the real fix
        — 
          — Splinter Review
      

    


  

        Attachment #211220 -
        Attachment is obsolete: true

        Attachment #211221 -
        Flags: superreview?(tor)

        Attachment #211221 -
        Flags: review?(bugmail)

        Attachment #211220 -
        Flags: superreview?

        Attachment #211220 -
        Flags: review?(bugmail)

    
  
Assignee: general → bzbarsky
OS: Windows XP → All
Priority: -- → P3
Hardware: PC → All
Summary: Conditional SVG with display: -moz-inline-stack crashes Firefox [@ nsIFrame::GetParent] → [FIX] Conditional SVG with display: -moz-inline-stack crashes Firefox [@ nsIFrame::GetParent]
Target Milestone: --- → mozilla1.9alpha

    
  

        Attachment #211221 -
        Flags: superreview?(tor) → superreview+

    
    

    
  
Fixed.
Status: NEW → RESOLVED
Closed: 18 years ago
Resolution: --- → FIXED

    
    

    
  
Crashtest checked in.
Flags: in-testsuite+
Crash Signature: [@ nsIFrame::GetParent]

          You need to log in
          before you can comment on or make changes to this bug.
        






  

    
  







  

    

      
Attachment

      

      
      
      
      
    

    

      

        

          

            
General

            

              Creator: 



            

            
Created: 

            
Updated: 

            
Size: