Crash [@ nsTextFrame::EnsureTextRun] with rtl

RESOLVED WORKSFORME

Status

()

Core
Graphics
--
critical
RESOLVED WORKSFORME
11 years ago
7 years ago

People

(Reporter: Jesse Ruderman, Unassigned)

Tracking

(Blocks: 1 bug, {crash, rtl, testcase})

Trunk
x86
Mac OS X
crash, rtl, testcase
Points:
---
Dependency tree / graph
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(Not tracked)

Details

(crash signature)

Attachments

(1 attachment)

(Reporter)

Description

11 years ago
Created attachment 278374 [details]
testcase (crashes Firefox when loaded)

Loading the testcase makes Firefox crash with a null dereference [@ nsTextFrame::EnsureTextRun].

The testcase looks pretty simple and harmless.  Aside from dir="rtl", the testcase is just sticking a simple inline element in a block and removing it.

I think there's some unnecessary wrapping, too.  Before the crash, 'G' appears on a separate line from 'h' unnecessarily.
This doesn't crash for me in today's build. Could it have been fixed by bug 382429?
(Reporter)

Comment 2

11 years ago
No longer crashes for me.
Status: NEW → RESOLVED
Last Resolved: 11 years ago
Resolution: --- → WORKSFORME
(Reporter)

Comment 3

10 years ago
Crashtest checked in.
Flags: in-testsuite+

Comment 4

10 years ago
Mass-assigning the new rtl keyword to RTL-related (see bug 349193).
Keywords: rtl
(Assignee)

Updated

7 years ago
Crash Signature: [@ nsTextFrame::EnsureTextRun]
You need to log in before you can comment on or make changes to this bug.