Closed Bug 416734 Opened 16 years ago Closed 16 years ago

Crash [@ nsLineBreaker::FlushCurrentWord] with rtl, -moz-pre-wrap, and more

Categories

(Core :: Layout, defect, P3)

Product:
Core
Component:
Layout
Platform:
x86
macOS
Type:
defect

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: jruderman, Unassigned)

References

Details

(Keywords: crash, rtl, testcase, Whiteboard: [sg:critical])

Crash Data

Attachments

(2 files)

testcase (crashes Firefox when loaded)
277 bytes, text/html
Details
stack trace
8.95 KB, text/plain
Details 
Loading the testcase makes Firefox crash [@ nsLineBreaker::FlushCurrentWord] calling a random address.
Flags: blocking1.9?

    
    

    
  
Doesn't crash on branch.

    
  
Whiteboard: [sg:critical]

    
    

    
  
..and actually doesn't crash on trunk for me either.

    
    

    
  

      
      
      
      

        Attached file
          
        stack trace
        — 
      

    


  

    
    

    
  
Ok, it turns out, I can reproduce this in a debug build, not in a normal build.
I just encountered this myself with a different testcase. Strange...
Flags: blocking1.9? → blocking1.9+
Priority: -- → P3
Flags: wanted1.9.0.x+
Flags: blocking1.9-
Flags: tracking1.9+

    
    

    
  
WFM, Mac trunk debug.  I can't get it to crash any more, even with Malloc*Scribble.
Group: security
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → WORKSFORME
Flags: wanted1.8.1.x-

    
    

    
  
Mass-assigning the new rtl keyword to RTL-related (see bug 349193).
Keywords: rtl
Flags: wanted1.9.0.x+ → wanted1.9.0.x-
Crash Signature: [@ nsLineBreaker::FlushCurrentWord]

          You need to log in
          before you can comment on or make changes to this bug.
        






  

    
  







  

    

      
Attachment

      

      
      
      
      
    

    

      

        

          

            
General

            

              Creator: 



            

            
Created: 

            
Updated: 

            
Size: