Crash [@ nsTextFragment::CharAt]

RESOLVED WORKSFORME

Status

()

Core
Layout: Text
--
critical
RESOLVED WORKSFORME
8 years ago
7 years ago

People

(Reporter: Jesse Ruderman, Unassigned)

Tracking

(Blocks: 2 bugs, {assertion, crash, testcase})

Trunk
x86
Mac OS X
assertion, crash, testcase
Points:
---
Dependency tree / graph
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(Not tracked)

Details

(crash signature)

Attachments

(1 attachment)

(Reporter)

Description

8 years ago
Created attachment 427541 [details]
testcase (crashes Firefox when loaded)

###!!! ASSERTION: bad index: 'PRUint32(aIndex) < mState.mLength', file ../../dist/include/nsTextFragment.h, line 186

Crash:

Thread 0 Crashed:  Dispatch queue: com.apple.main-thread
0   XUL                           	0x004dbdcf nsTextFragment::CharAt(int) const + 127 (nsTextFragment.h:187)
1   XUL                           	0x004c7254 HasTerminalNewline(nsTextFrame const*) + 92 (nsTextFrameThebes.cpp:1308)
2   XUL                           	0x004d3fc1 BuildTextRunsScanner::ScanFrame(nsIFrame*) + 261 (nsTextFrameThebes.cpp:1365)
3   XUL                           	0x004d4ac4 BuildTextRuns(gfxContext*, nsTextFrame*, nsIFrame*, nsLineList_iterator const*) + 2081 (nsTextFrameThebes.cpp:1136)
4   XUL                           	0x004d4d13 nsTextFrame::EnsureTextRun(gfxContext*, nsIFrame*, nsLineList_iterator const*, unsigned int*) + 281 (nsTextFrameThebes.cpp:1989)
5   XUL                           	0x004d7ab1 nsTextFrame::AddInlineMinWidthForFlow(nsIRenderingContext*, nsIFrame::InlineMinWidthData*) + 91 (nsTextFrameThebes.cpp:5661)
6   XUL                           	0x004d8001 nsTextFrame::AddInlineMinWidth(nsIRenderingContext*, nsIFrame::InlineMinWidthData*) + 209 (nsTextFrameThebes.cpp:5774)
...
(Reporter)

Comment 1

8 years ago
WFM
Status: NEW → RESOLVED
Last Resolved: 8 years ago
Resolution: --- → WORKSFORME
(Reporter)

Comment 2

8 years ago
Crashtest: http://hg.mozilla.org/mozilla-central/rev/e5dd52dd3cb5
Flags: in-testsuite+
(Assignee)

Updated

7 years ago
Crash Signature: [@ nsTextFragment::CharAt]
You need to log in before you can comment on or make changes to this bug.