372550 - Crash [@ IsPercentageAware] [@ nsLineLayout::ReflowFrame] with first-letter

Status: RESOLVED FIXED

(Core :: Layout, defect)

Description

[Jesse Ruderman]

Attachment: testcase (crashes Firefox immediately)

Steps to reproduce:
1. Load the testcase.

Result:
###!!! ASSERTION: null frame is not allowed: 'aFrame', file /Users/jruderman/trunk/mozilla/layout/generic/nsLineLayout.cpp, line 707

Crash [@ IsPercentageAware] called by nsLineLayout::ReflowFrame.

This regressed between 2007-02-27 and 2007-03-03; bug 367650 may have caused the regression.

The testcase was derived from http://lxr.mozilla.org/seamonkey/source/layout/reftests/first-letter/dynamic-3b.html, which was added as a reftest for bug 367650.

Comment 1

[Boris Zbarsky [:bzbarsky]]

Patch for bug 362901 fixes this.  Note that that bug is security-sensitive, so no dep for now.

Comment 2

[Boris Zbarsky [:bzbarsky]]

Fixed by checkin for bug 362901.

Comment 3

[Jeff Walden [:Waldo]]

At a cursory glance, the testcase here and the one committed have different enough construction that both should probably be committed.

Comment 4

[Jesse Ruderman]

Crashtest checked in.