Closed Bug 415685 Opened 16 years ago Closed 16 years ago

Crash [@ nsOverflowContinuationTracker::SetUpListWalker] with -moz-column

Categories

(Core :: Layout, defect, P3)

Product:
Core
Component:
Layout
Platform:
x86
macOS
Type:
defect

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: jruderman, Unassigned)

References

Details

(Keywords: assertion, crash, testcase, Whiteboard: [sg:critical])

Crash Data

Attachments

(1 file)

testcase (crashes Firefox when loaded)
471 bytes, text/html
Details 
Loading the testcase makes Firefox crash [@ nsOverflowContinuationTracker::SetUpListWalker] calling a random address.

Before the crash, I see:

###!!! ASSERTION: frame not in line: 'line->Contains(aDeletedFrame)', file /Users/jruderman/trunk/mozilla/layout/generic/nsBlockFrame.cpp, line 5351

###!!! ASSERTION: can't find deleted frame in lines: 'Error', file /Users/jruderman/trunk/mozilla/layout/generic/nsBlockFrame.cpp, line 5331

Tested with a Mac trunk debug build.
Flags: blocking1.9?

    
    

    
  
Can also crash at:
  [@ nsOverflowContinuationTracker::Insert]
  [@ nsIFrame::GetNextSibling] called by nsFrameList::GetPrevSiblingFor
  [@ nsFrameList::Destroy]

    
  
Whiteboard: [sg:critical]

    
  
Flags: blocking1.9? → blocking1.9+
Priority: -- → P3
Flags: wanted1.9.0.x+
Flags: blocking1.9-
Flags: tracking1.9+

    
    

    
  
WFM, Mac trunk debug.  Doesn't seem to affect branch, so I'm making this public immediately.
Group: security
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → WORKSFORME
Flags: wanted1.8.1.x-
Flags: wanted1.9.0.x+ → wanted1.9.0.x-

    
    

    
  
changeset:   12911:205c8d278ef6
user:        jruderman@hmc.edu
date:        Tue Mar 11 17:44:46 2008 -0700
summary:     Add crashtest
Flags: in-testsuite+
Crash Signature: [@ nsOverflowContinuationTracker::SetUpListWalker]

          You need to log in
          before you can comment on or make changes to this bug.
        






  

    
  







  

    

      
Attachment

      

      
      
      
      
    

    

      

        

          

            
General

            

              Creator: 



            

            
Created: 

            
Updated: 

            
Size: