Created attachment 370538 [details] testcase B (triggers assertion and scary crash) ###!!! ASSERTION: frame was not removed from primary frame map before destruction or was readded to map after being removed: 'Not Reached', file /Users/jruderman/central/layout/base/nsFrameManager.cpp, line 732 + touches 0xddddddf5
(In reply to comment #1) > ###!!! ASSERTION: frame was not removed from primary frame map before > destruction or was readded to map after being removed: 'Not Reached', file > /Users/jruderman/central/layout/base/nsFrameManager.cpp, line 732 The stack for this assertion makes it look like another duplicate of bug 463350. (It goes through DeleteNextInFlowChild.) However, the first testcase seems like it could be different.
Depends on: 463350
WFM on mozilla-central. No assertions, no crashes.
Status: NEW → RESOLVED
Last Resolved: 10 years ago
Resolution: --- → WORKSFORME
Crash Signature: [@ InlineBackgroundData::GetNextContinuation]
You need to log in before you can comment on or make changes to this bug.