Closed Bug 471360 Opened 11 years ago Closed 10 years ago
"ASSERTION: Substring out of range" with iframe, rtl, moz-column
On about 2% of iterations, this testcase triggers: ###!!! ASSERTION: Invalid offset: 'aOffset <= mSkipChars->mCharCount', file /Users/jruderman/central/gfx/thebes/src/gfxSkipChars.cpp, line 92 ###!!! ASSERTION: Substring out of range: 'aStart + aLength <= mCharacterCount', file /Users/jruderman/central/gfx/thebes/src/gfxFont.cpp, line 1776
The testcase triggers the bug reliably now.
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → WORKSFORME
Pushed by firstname.lastname@example.org: https://hg.mozilla.org/integration/mozilla-inbound/rev/135a5aa350b7 Add crashtest. r=mats
You need to log in before you can comment on or make changes to this bug.