Created attachment 267222 [details] testcase (crashes Firefox when loaded) This regressed between 2007-06-03 and 2007-06-04 nightlies, so I think it's a regression from bug 382746 or bug 382899.
Created attachment 267285 [details] [diff] [review] Proposed patch This needs to be null-checked (c.f. nsGridRowLeafLayout::PopulateBoxSizes).
Comment on attachment 267285 [details] [diff] [review] Proposed patch Sure
Attachment #267285 - Flags: superreview?(bzbarsky) → superreview+
Fix checked in.
Status: ASSIGNED → RESOLVED
Last Resolved: 12 years ago
Resolution: --- → FIXED
Crashtest checked in.
Flags: in-testsuite? → in-testsuite+
Component: XP Toolkit/Widgets: XUL → XUL
QA Contact: xptoolkit.xul → xptoolkit.widgets
Crash Signature: [@ nsIFrame::GetNextBox]
You need to log in before you can comment on or make changes to this bug.