Closed
Bug 455665
Opened 16 years ago
Closed 16 years ago
nsSplitterFrameInner crashes in some special case
Categories
(Core :: Layout, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: romaxa, Unassigned)
Details
Attachments
(1 file)
|
621 bytes,
patch
|
bzbarsky
:
review+
bzbarsky
:
superreview+
|
Details | Diff | Splinter Review |
nsSplitterFrameInner will crash if we have MouseDrag event after MouseUp... Here http://hg.mozilla.org/mozilla-central/file/287bb7a9c5d4/layout/xul/base/src/nsSplitterFrame.cpp#l527 we deleting mChildInfosBefore/After without resetting of mChildInfosBefore/AfterCount... It will crash here: http://hg.mozilla.org/mozilla-central/file/287bb7a9c5d4/layout/xul/base/src/nsSplitterFrame.cpp#l563
Attachment #339030 -
Flags: review?(bzbarsky)
|
||
Updated•16 years ago
|
Attachment #339030 -
Flags: superreview+
Attachment #339030 -
Flags: review?(bzbarsky)
Attachment #339030 -
Flags: review+
|
Reporter | |
Comment 1•16 years ago
|
||
Fixed: http://hg.mozilla.org/mozilla-central/rev/50f894002b47
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → FIXED
|
||
Updated•6 years ago
|
Product: Core → Core Graveyard
|
Assignee | |
Updated•6 years ago
|
Component: Layout: Misc Code → Layout
Product: Core Graveyard → Core
You need to log in
before you can comment on or make changes to this bug.
Description
•