Closed Bug 328944 Opened 14 years ago Closed 11 years ago

ASSERTION: out of bounds (nsChildIterator.h#133)

Categories

(Core :: XUL, defect)

PowerPC
macOS
defect
Not set

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: jruderman, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: assertion, testcase)

Attachments

(1 file)

472 bytes, application/vnd.mozilla.xul+xml
Details
###!!! ASSERTION: out of bounds: 'PRInt32(aIndex) >= 0 && aIndex <= length', file /Users/admin/trunk/mozilla/layout/base/nsChildIterator.h, line 133
Attached file testcase
Flags: blocking1.9a1?
Flags: blocking1.9a1? → blocking1.9-
Whiteboard: [wanted-1.9]
Still happens on trunk.
Flags: wanted1.9+
Whiteboard: [wanted-1.9]
Flags: wanted1.9-
Flags: wanted1.9+
Flags: wanted-next+
As well as having more children than insertion points, which is what Jesse's testcase demonstrates, there seems to be another way to trigger this bug, and that is by causing a restyle on an element associated with an insertion point in an XBL binding. SeaMonkey's prefwindow is hitting this, and in this case a tree is being restyled for whatever reason (probably a startup scrollbar restyle that was deferred). Now the tree is the third child of the prefwindow element, but it is the only child associated with the insertion point in question, so the child index of three as passed in is bogus.
Component: XP Toolkit/Widgets: XUL → XUL
QA Contact: xptoolkit.xul → xptoolkit.widgets
WFM on mozilla-central.

FWIW, bug 307394 changed the variable name involved in this assertion.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → WORKSFORME
Flags: in-testsuite+
You need to log in before you can comment on or make changes to this bug.