Closed
Bug 437566
Opened 18 years ago
Closed 18 years ago
Crash [@ nsSpaceManager::GetPrevBand] with floats, svg
Categories
(Core :: Layout: Floats, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 437565
People
(Reporter: jruderman, Unassigned)
References
Details
(Keywords: assertion, crash, testcase, Whiteboard: [sg:dupe 437565])
Crash Data
Attachments
(1 file)
|
554 bytes,
application/xhtml+xml
|
Details |
Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1a1pre) Gecko/2008053113 Minefield/3.1a1pre
Steps to reproduce:
1. Load the testcase in a debug build of Firefox.
Result:
###!!! ASSERTION: aBandRect should be first rect within its band: '!aBandRect || aBandRect == mBandList.Head() || aBandRect->Prev()->mBottom != aBandRect->mBottom', file /Users/jruderman/central/layout/generic/nsSpaceManager.h, line 475
Crash dereferencing 0xc0000017 (note the first digit -- this is not a null deref!)
The assertion also occurs in bug 410232, but that bug has a different testcase, no crash, and is public.
| Reporter | ||
Comment 1•18 years ago
|
||
Double-clicking "submit" button in Safari = fail.
Status: NEW → RESOLVED
Closed: 18 years ago
Resolution: --- → DUPLICATE
Updated•18 years ago
|
Whiteboard: [sg:dupe 437565]
| Assignee | ||
Updated•15 years ago
|
Crash Signature: [@ nsSpaceManager::GetPrevBand]
Updated•14 years ago
|
Group: core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•