Closed Bug 368752 Opened 14 years ago Closed 13 years ago

Crash [@ nsIFrame::Invalidate] with display: inherit, large margin and padding and generated content

Categories

(Core :: Layout, defect)

x86
Windows XP
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: martijn.martijn, Assigned: martijn.martijn)

References

Details

(Keywords: crash, regression, testcase)

Crash Data

Attachments

(1 file)

Attached file testcase
See testcase, which crashes current trunk Mozilla builds (almost) on load.
This regressed between 2006-12-07 and 2006-12-08, so a regression from bug 300030.

Talkback ID: TB28865707Q
nsIFrame::Invalidate  [mozilla\layout\generic\nsframe.cpp, line 3690]
nsFrameManager::RemoveFrame  [mozilla\layout\base\nsframemanager.cpp, line 709]
DeletingFrameSubtree  [mozilla\layout\base\nscssframeconstructor.cpp, line 9399]
nsCSSFrameConstructor::ContentRemoved  [mozilla\layout\base\nscssframeconstructor.cpp, line 9549]
0x0144b158
0x85042444
Flags: blocking1.9? → blocking1.9+
I don't seem to crash anymore, using:
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a5pre) Gecko/20070512 Minefield/3.0a5pre

However, the word "text" doesn't show up anymore with the testcase. I guess this bug should be closed and a new bug should be filed for that?
Ok, I filed bug 383854 for it.
This bug is worksforme.
Sorry for the delay. 
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → WORKSFORME
Flags: in-testsuite?
Crash Signature: [@ nsIFrame::Invalidate]
Crash test:
https://hg.mozilla.org/integration/mozilla-inbound/rev/27604afdef11
Flags: in-testsuite? → in-testsuite+
You need to log in before you can comment on or make changes to this bug.