Closed Bug 410967 Opened 18 years ago Closed 18 years ago

"ASSERTION: negative length" with wrapping, arabic

Categories

(Core :: Layout: Text and Fonts, defect)

defect
Not set
normal

Tracking

()

RESOLVED FIXED

People

(Reporter: jruderman, Unassigned)

References

Details

(Keywords: assertion, regression, testcase)

Attachments

(2 files)

Attached file testcase
Loading the testcase triggers an assertion that was added in bug 406380: ###!!! ASSERTION: negative length: 'GetContentEnd() - mContentOffset >= 0', file /Users/jruderman/trunk/mozilla/layout/generic/nsTextFrame.h, line 291
Attached file Frame dumps #1
Thje ResolveBidi() call is from nsBlockFrame::Reflow(). The nsTextFrame::SetLength() calls are from nsTextFrame::AdjustOffsetsForBidi().
It does not assert if I apply the patch in bug 409375.
Depends on: 409375
OS: Mac OS X → All
Hardware: PC → All
Fixed by bug 409375. Testcase checked in as crashtest.
Status: NEW → RESOLVED
Closed: 18 years ago
Flags: in-testsuite+
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: