Closed Bug 452165 Opened 16 years ago Closed 16 years ago

Crash [@ nsCSSFrameConstructor::FindPrimaryFrameFor] with -moz-column

Categories

(Core :: Layout, defect)

x86
macOS
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: jruderman, Unassigned)

References

Details

(Keywords: crash, testcase, Whiteboard: [sg:critical])

Crash Data

Attachments

(1 file)

Attached file testcase
Loading the testcase triggers: ###!!! ASSERTION: illegal height for combined area: 'aCombinedArea.height >= 0', file /Users/jruderman/central/mozilla/layout/generic/nsLineBox.cpp, line 502 Crash [@ nsCSSFrameConstructor::FindPrimaryFrameFor], calling a random address.
Whiteboard: [sg:critlcal]
Whiteboard: [sg:critlcal] → [sg:critical]
Doesn't crash for me, although I see the assertions.
I say that counts as WFM, given how easy it is to trigger the assertion in question.
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → WORKSFORME
Crash Signature: [@ nsCSSFrameConstructor::FindPrimaryFrameFor]
Group: core-security → core-security-release
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: