450509 - Crash [@ nsIFrame::Invalidate] on reload with -moz-column-count, object, etc

Status: RESOLVED WORKSFORME

(Core :: Layout, defect)

Description

[Martijn Wargers (dead)]

Attachment: testcase

I guess this might be related to bug 399994.

Reloading the attached testcase, crashes current trunk build and Firefox3.

This seems to have regressed between 2007-10-01 and 2007-10-02:
http://bonsai.mozilla.org/cvsquery.cgi?treeid=default&module=all&branch=HEAD&branchtype=match&dir=&file=&filetype=match&who=&whotype=match&sortby=Date&hours=2&date=explicit&mindate=2007-10-01+04&maxdate=2007-10-02+09&cvsroot=%2Fcvsroot
I think a regression from bug 154892, somehow.

http://crash-stats.mozilla.com/report/index/e339b691-698d-11dd-add3-0013211cbf8a?p=1
0  	xul.dll  	nsIFrame::Invalidate  	 layout/generic/nsFrame.cpp:3654
1 	xul.dll 	nsBlinkTimer::Notify 	layout/generic/nsTextFrameThebes.cpp:2742
2 	xul.dll 	nsTimerImpl::Fire 	xpcom/threads/nsTimerImpl.cpp:423
3 	xul.dll 	nsTimerEvent::Run 	xpcom/threads/nsTimerImpl.cpp:512
4 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:510
5 	nspr4.dll 	PR_GetEnv

Comment 1

[Bernd]

the testcase is wfm

Comment 2

[Martijn Wargers (dead)]

Yes, wfm too.