Closed Bug 520340 Opened 15 years ago Closed 15 years ago

"ABORT: running past end" with nested -moz-column elements

Categories

(Core :: Layout, defect)

defect
Not set
critical

Tracking

()

RESOLVED FIXED
mozilla1.9.3a1

People

(Reporter: jruderman, Assigned: MatsPalmgren_bugz)

References

Details

(Keywords: assertion, testcase, Whiteboard: [trunk only])

Attachments

(2 files)

Security-sensitive because other "running past end" bugs were.
Attached file stack trace
If that stack trace is pointing to
  2542       if (fromLine == aFromContainer->mLines.begin()) {
then it seems like a regression from bug 512471. CC'ing bz. It should be pretty easy to fix.
Mats, your patch in bug 533379 fixes this, right?
Depends on: 533379
Yes, bug 533379 will fix this.  I'll add the testcase in this bug to the
crashtest suite when that lands.
Assignee: nobody → matspal
Flags: in-testsuite?
OS: Mac OS X → All
Hardware: x86 → All
Whiteboard: [trunk only]
Fixed by bug 533379.  Landed the testcase there.
Status: NEW → RESOLVED
Closed: 15 years ago
Flags: in-testsuite? → in-testsuite+
Resolution: --- → FIXED
Target Milestone: --- → mozilla1.9.3a1
Group: core-security
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: