Closed
Bug 445288
Opened 16 years ago
Closed 16 years ago
"ABORT: running past end" with float, huge height
Categories
(Core :: Layout: Floats, defect)
Core
Layout: Floats
Tracking
()
RESOLVED
FIXED
People
(Reporter: jruderman, Assigned: MatsPalmgren_bugz)
References
Details
(4 keywords, Whiteboard: [sg:critical])
Attachments
(1 file)
|
429 bytes,
text/html
|
Details |
Loading the testcase in a debug build triggers: ###!!! ABORT: running past end: 'mCurrent != mListLink', file /Users/jruderman/central/layout/base/../generic/nsLineBox.h, line 611 This testcase is notable for triggering the abort *without* weird things like -moz-column. It just uses large heights/margins and two floats. The testcase can crash nightlies, but it might take a few reloads.
|
Assignee | |
Comment 1•16 years ago
|
||
The patch in bug 443528 fixes it.
|
Reporter | |
Updated•16 years ago
|
Whiteboard: [sg:critical]
|
|
Assignee | |
Comment 2•16 years ago
|
||
Resolving as fixed by bug 443528. Holding the crashtest until 1.9.0.x is released with a fix for bug 443528. I get the "Shouldn't be incomplete..." assertion with this testcase, I'm making a note of it in bug 459597. -> FIXED
Assignee: nobody → mats.palmgren
Status: NEW → RESOLVED
Closed: 16 years ago
Flags: in-testsuite?
Resolution: --- → FIXED
|
|
Reporter | |
Comment 3•16 years ago
|
||
Thanks for checking in the testcase, Mats.
Group: core-security
Flags: in-testsuite? → in-testsuite+
|
|
Assignee | |
Comment 4•16 years ago
|
||
No problem, here are the changesets: http://hg.mozilla.org/mozilla-central/rev/b0e50bba5db7 http://hg.mozilla.org/releases/mozilla-1.9.1/rev/d00b0d0d4b64 and on CVS trunk: mozilla/layout/generic/crashtests/445288.html 1.1 mozilla/layout/generic/crashtests/crashtests.list 1.120
Keywords: fixed1.9.0.4
You need to log in
before you can comment on or make changes to this bug.
Description
•