513106 - "ASSERTION: didn't subtract all that we added"

Status: NEW

(Core :: Layout: Tables, defect)

Description

[Jesse Ruderman]

Attachment: testcase (asserts and hangs when loaded)

###!!! ASSERTION: program error: 'iter.IsLeftMostTable() || iter.IsRightMostTable()', file /Users/jruderman/central/layout/tables/nsTableFrame.cpp, line 6838

Comment 1

[Bernd]

the assert from the bug title is gone the hang is not.

Comment 2

[Bernd]

the hang comes from the dash drawing routine:

<table width="33554432px" style="border-collapse: collapse;"><tbody style="border: 2px dotted yellow;">

means we will draw 4011103 small rectangles at http://mxr.mozilla.org/mozilla-central/source/layout/base/nsCSSRendering.cpp#2955

Comment 3

[Mats Palmgren (inactive)]

Still very slow but I wouldn't call it hang.  Tested on Linux and OSX.
Unlikely to affect any real web sites much though.

Comment 4

[Ryan VanderMeulen [:RyanVM]]

Testcase still asserts on trunk, now with:

###!!! ASSERTION: didn't subtract all that we added: '(space == 0 || space == nscoord_MAX) && ((l2t == FLEX_PCT_LARGE) ? (-0.001f < basis.f && basis.f < 0.001f) : (basis.c == 0 || basis.c == nscoord_MAX))', file /builds/slave/try-l64-d-00000000000000000000/build/src/layout/tables/BasicTableLayoutStrategy.cpp, line 1074

No hangs, though.