Crash [@ nsTArray_base::ShiftData] when removing display:table style in table cell with rowspan=5

RESOLVED FIXED

Status

()

--
critical
RESOLVED FIXED
12 years ago
7 years ago

People

(Reporter: martijn.martijn, Assigned: bernd_mozilla)

Tracking

({crash, regression, testcase})

Trunk
x86
Windows XP
crash, regression, testcase
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(Not tracked)

Details

(crash signature)

Attachments

(1 attachment)

(Reporter)

Description

12 years ago
See upcoming testcase that crashes Mozilla on load.

Talkback ID: TB27798789X
MSVCR80.dll + 0x150aa (0x781450aa)
nsTArray_base::ShiftData  [mozilla\xpcom\build\nstarray.cpp, line 176]
nsTArray_base::InsertSlotsAt  [mozilla\xpcom\build\nstarray.cpp, line 196]
nsTArray<CellData *>::InsertElementsAt<CellData *>  [mozilla\dist\include\xpcom\nstarray.h, line 653]
nsCellMap::InsertCells  [mozilla\layout\tables\nscellmap.cpp, line 1683]
nsTableCellMap::InsertCells  [mozilla\layout\tables\nscellmap.cpp, line 669]
nsTableFrame::InsertCells  [mozilla\layout\tables\nstableframe.cpp, line 960]
nsTableRowFrame::InsertFrames  [mozilla\layout\tables\nstablerowframe.cpp, line 238]
nsFrameManager::InsertFrames  [mozilla\layout\base\nsframemanager.cpp, line 696]

I haven't looked for a regression range, but I guess this a regression from bug 356335.
(Reporter)

Comment 1

12 years ago
Created attachment 249810 [details]
testcase
(Assignee)

Comment 3

12 years ago
taking for now, there a couple of patches on the dependency list that wait for review
Assignee: nobody → bernd_mozilla
(Reporter)

Comment 4

12 years ago
Testcase is worksforme, with a 2006-01-03 trunk build, I guess one of the patches from the similar bugs fixed (I'm too lazy to look which bug might have fixed this, if it is desired, though, I can look for it).
Status: NEW → RESOLVED
Last Resolved: 12 years ago
Resolution: --- → WORKSFORME
fixed by bug 364318 on the 20070101
Depends on: 364318
Resolution: WORKSFORME → FIXED
Crash Signature: [@ nsTArray_base::ShiftData]
You need to log in before you can comment on or make changes to this bug.