Closed
Bug 400223
Opened 17 years ago
Closed 17 years ago
"ASSERTION: StealFrame failure" and crash with -moz-column, overflowing height, position: absolute
Categories
(Core :: Layout, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: jruderman, Assigned: fantasai.bugs)
References
Details
(Keywords: assertion, crash, testcase, Whiteboard: [sg:critical])
Attachments
(2 files)
|
441 bytes,
text/html
|
Details | |
|
1.61 KB,
patch
|
roc
:
review+
roc
:
superreview+
roc
:
approval1.9+
|
Details | Diff | Splinter Review |
Loading the testcase triggers an assertion: ###!!! ASSERTION: StealFrame failure: 'NS_SUCCEEDED(rv)', file /Users/jruderman/trunk/mozilla/layout/generic/nsContainerFrame.cpp, line 1059 Reloading or closing triggers one of the following crashes: * [@ IsBindingAncestor] dereferencing 0xdddddddd * [@ nsIFrame::GetStateBits] dereferencing 0xddddde01 * [@ nsFrameManager::CaptureFrameStateFor] calling a random address
Flags: blocking1.9?
|
Reporter | |
Updated•17 years ago
|
Whiteboard: [sg:critical]
Assignee: nobody → fantasai.bugs
Status: NEW → ASSIGNED
Attachment #285309 -
Flags: superreview?(roc)
Attachment #285309 -
Flags: review?(roc)
Attachment #285309 -
Flags: superreview?(roc)
Attachment #285309 -
Flags: superreview+
Attachment #285309 -
Flags: review?(roc)
Attachment #285309 -
Flags: review+
Attachment #285309 -
Flags: approval1.9+
Fix checked in, nsBlockFrame.cpp rev 3.880
Status: ASSIGNED → RESOLVED
Closed: 17 years ago
Resolution: --- → FIXED
|
||
Updated•17 years ago
|
Flags: in-testsuite?
|
|
Reporter | |
Comment 3•16 years ago
|
||
No assertions/crashes on branch.
Group: security
Flags: wanted1.8.1.x-
You need to log in
before you can comment on or make changes to this bug.
Description
•