Closed Bug 431738 Opened 12 years ago Closed 12 years ago

Divide by zero [@ nsListBoxBodyFrame::VisibilityChanged] with <xul:listboxbody>

Categories

(Core :: XUL, defect, critical)

defect
Not set
critical

Tracking

()

RESOLVED FIXED
mozilla1.9.1a1

People

(Reporter: jruderman, Assigned: mats)

References

(Blocks 2 open bugs)

Details

(Keywords: crash, testcase, Whiteboard: [sg:dos])

Crash Data

Attachments

(2 files)

Loading the testcase causes a divide-by-zero crash (mRowHeight is 0)
[@ nsListBoxBodyFrame::VisibilityChanged].
Attached patch Patch rev. 1Splinter Review
Two remaining unprotected mRowHeight divisions, the rest of the file is ok.
Assignee: nobody → mats.palmgren
Status: NEW → ASSIGNED
Attachment #318965 - Flags: superreview?(roc)
Attachment #318965 - Flags: review?(roc)
Attachment #318965 - Flags: superreview?(roc)
Attachment #318965 - Flags: superreview+
Attachment #318965 - Flags: review?(roc)
Attachment #318965 - Flags: review+
http://hg.mozilla.org/mozilla-central/index.cgi/rev/0398e8b58b9c
http://hg.mozilla.org/mozilla-central/index.cgi/rev/64c79d993efd

-> FIXED
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Flags: in-testsuite+
OS: Mac OS X → All
Hardware: PC → All
Resolution: --- → FIXED
Target Milestone: --- → mozilla1.9.1a1
Component: XP Toolkit/Widgets: XUL → XUL
QA Contact: xptoolkit.xul → xptoolkit.widgets
Whiteboard: [sg:dos]
Crash Signature: [@ nsListBoxBodyFrame::VisibilityChanged]
You need to log in before you can comment on or make changes to this bug.