Closed Bug 408299 Opened 17 years ago Closed 17 years ago

"ASSERTION: Creating ContinuingTextFrame, but there is no more content" with -moz-column, rtl

Categories

(Core :: Layout: Text and Fonts, defect, P3)

x86
macOS
defect

Tracking

()

RESOLVED FIXED

People

(Reporter: jruderman, Assigned: smontagu)

References

Details

(Keywords: assertion, rtl, testcase, Whiteboard: [sg:moderate?])

Attachments

(1 file)

Attached file testcase
Loading the testcase triggers:

###!!! ASSERTION: Creating ContinuingTextFrame, but there is no more content: 'mContentOffset < aContent->GetText()->GetLength()', file /Users/jruderman/trunk/mozilla/layout/generic/nsTextFrameThebes.cpp, line 3165

###!!! ASSERTION: bad index: 'PRUint32(aIndex) < mState.mLength', file /Users/jruderman/trunk/mozilla/layout/base/../../content/base/src/nsTextFragment.h, line 184

Security-sensitive because previous bugs about the "bad index" assertion were "[sg:moderate?]".
Flags: blocking1.9?
Whiteboard: [sg:moderate?]
Depends on: 408292
+'ing w/ P3.
Assignee: roc → nobody
Component: GFX: Thebes → Layout: Fonts and Text
Flags: blocking1.9? → blocking1.9+
Priority: -- → P3
QA Contact: thebes → layout.fonts-and-text
Assignee: nobody → smontagu
Fixed by checkin of bug 408292. Checked in the testcase as a crashtest.
Status: NEW → RESOLVED
Closed: 17 years ago
Flags: in-testsuite+
Resolution: --- → FIXED
My branch build renders the testcase strangely (duplicated content) but doesn't assert or crash.
Group: security
Flags: wanted1.8.1.x-
Mass-assigning the new rtl keyword to RTL-related (see bug 349193).
Keywords: rtl
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: