"nsLineLayout: ComboboxControl(select) ... didn't set whad" with <select style="width: 1px;">

RESOLVED FIXED

Status

()

Core
Layout: Form Controls
RESOLVED FIXED
12 years ago
12 years ago

People

(Reporter: Jesse Ruderman, Unassigned)

Tracking

(Blocks: 1 bug, {testcase})

Trunk
PowerPC
Mac OS X
testcase
Points:
---
Dependency tree / graph
Bug Flags:
in-testsuite ?

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Reporter)

Description

12 years ago
Loading the testcase *in a debug build* results in a really tall div and a printf message like

nsLineLayout: ComboboxControl(select)(1)@0x25a06a8 didn't set whad 0,330,-559038737,-559038737!

I don't know whether the memory involved is ever initialized (e.g. to zero) in non-debug builds, so I'm marking this as security-sensitive for now.
(Reporter)

Comment 1

12 years ago
Created attachment 222769 [details]
testcase
Whiteboard: [sg:investigate]
(Reporter)

Comment 2

12 years ago
bz says that because the nsHTMLReflowMetrics constructor initializes these things (even in non-debug builds), we're never using a value from uninitialized memory.  So this bug isn't a security issue.
Group: security
Whiteboard: [sg:investigate]
Is this still an issue?  I'd bet the reflow branch fixed this (in particular, I don't see the warning and wouldn't expect anything weird in that testcase).
(Reporter)

Comment 4

12 years ago
WFM.  Debug rendering is reasonable now (and matches opt rendering), and the warning is gone.

--> Fixed by reflow branch landing (bug 300030).
Status: NEW → RESOLVED
Last Resolved: 12 years ago
Depends on: 300030
Resolution: --- → FIXED

Updated

12 years ago
Flags: in-testsuite?
You need to log in before you can comment on or make changes to this bug.