Crash [@ nsIFrame::Invalidate] with display: inherit, large margin and padding and generated content

RESOLVED WORKSFORME

Status

()

--
critical
RESOLVED WORKSFORME
12 years ago
6 years ago

People

(Reporter: martijn.martijn, Assigned: martijn.martijn)

Tracking

({crash, regression, testcase})

Trunk
x86
Windows XP
crash, regression, testcase
Points:
---
Bug Flags:
blocking1.9 +
in-testsuite +

Firefox Tracking Flags

(Not tracked)

Details

(crash signature)

Attachments

(1 attachment)

(Assignee)

Description

12 years ago
Created attachment 253404 [details]
testcase

See testcase, which crashes current trunk Mozilla builds (almost) on load.
This regressed between 2006-12-07 and 2006-12-08, so a regression from bug 300030.

Talkback ID: TB28865707Q
nsIFrame::Invalidate  [mozilla\layout\generic\nsframe.cpp, line 3690]
nsFrameManager::RemoveFrame  [mozilla\layout\base\nsframemanager.cpp, line 709]
DeletingFrameSubtree  [mozilla\layout\base\nscssframeconstructor.cpp, line 9399]
nsCSSFrameConstructor::ContentRemoved  [mozilla\layout\base\nscssframeconstructor.cpp, line 9549]
0x0144b158
0x85042444
Flags: blocking1.9? → blocking1.9+
(Assignee)

Comment 1

12 years ago
I don't seem to crash anymore, using:
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a5pre) Gecko/20070512 Minefield/3.0a5pre

However, the word "text" doesn't show up anymore with the testcase. I guess this bug should be closed and a new bug should be filed for that?
(Assignee)

Comment 3

12 years ago
Ok, I filed bug 383854 for it.
This bug is worksforme.
Sorry for the delay. 
Status: NEW → RESOLVED
Last Resolved: 12 years ago
Resolution: --- → WORKSFORME

Updated

12 years ago
Flags: in-testsuite?
Crash Signature: [@ nsIFrame::Invalidate]
Crash test:
https://hg.mozilla.org/integration/mozilla-inbound/rev/27604afdef11
Flags: in-testsuite? → in-testsuite+
You need to log in before you can comment on or make changes to this bug.