Closed Bug 4013 Opened 25 years ago Closed 25 years ago

UMR in nsLineLayout::PlaceTopBottomFrames()

Categories

(Core :: Layout, defect, P3)

defect

Tracking

()

VERIFIED FIXED

People

(Reporter: bruce, Assigned: buster)

Details

nsLineLayout::PlaceTopBottomFrames() has an uninitialized memory read tons of
times in a build from March 18, 1999 after Kipp's checkin at 13:03 (on Bonsai).

The line at fault is:
nscoord distanceFromTop = distanceFromTop + pfd->mBounces.y;

Should the second instance of 'distanceFromTop' be the arg, aDistanceFromTop, or
... ?
Status: NEW → ASSIGNED
Status: ASSIGNED → RESOLVED
Closed: 25 years ago
Resolution: --- → FIXED
Fixed. Also found one in nsBlockFrame and nsHTMLReflowState
Status: RESOLVED → VERIFIED
Looks good!
You need to log in before you can comment on or make changes to this bug.