Closed Bug 487724 Opened 15 years ago Closed 14 years ago

"ASSERTION: Invalid offset" and crash [@ nsLineBreaker::AppendText] with RLO

Categories

(Core :: Layout: Text and Fonts, defect)

Product:
Core
Component:
Layout: Text and Fonts
Platform:
x86
macOS
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: jruderman, Unassigned)

References

Details

(Keywords: assertion, crash, testcase)

Crash Data

Attachments

(1 file)

testcase (crashes Firefox when loaded)
531 bytes, text/html
Details 
###!!! ASSERTION: Invalid offset: 'aOffset <= mSkipChars->mCharCount', file /Users/jruderman/central/gfx/thebes/src/gfxSkipChars.cpp, line 92

+ null deref [@ nsLineBreaker::AppendText]
Can also trigger this assertion (during shutdown) instead of a crash:

###!!! ASSERTION: Textrun was not completely removed from the cache!: 'aTextRun->mCachedWords == 0', file /Users/jruderman/central/gfx/thebes/src/gfxTextRunWordCache.cpp, line 856
Depends on: 332655
WFM on trunk.  I'll add the testcase as a crashtest.
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → WORKSFORME
Crashtest: http://hg.mozilla.org/mozilla-central/rev/120667a01fd2
Flags: in-testsuite+
Crash Signature: [@ nsLineBreaker::AppendText]
You need to log in before you can comment on or make changes to this bug.