Closed
Bug 564054
Opened 11 years ago
Closed 11 years ago
Crash [@ nsCellMapColumnIterator::GetNextFrame]
Categories
(Core :: Layout: Tables, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: jruderman, Assigned: bernd_mozilla)
References
(Blocks 1 open bug)
Details
(Keywords: assertion, crash, testcase)
Crash Data
Attachments
(2 files)
531 bytes,
text/html
|
Details | |
2.71 KB,
patch
|
bzbarsky
:
review+
|
Details | Diff | Splinter Review |
Loading the testcase triggers two assertion failures and a crash. ###!!! ASSERTION: cannot overlap originating cell: 'Error', file /Users/jruderman/mozilla-central/layout/tables/nsCellMap.cpp, line 1539 ###!!! ASSERTION: Bogus mOrigCells?: 'mCurMapRow < mCurMapRelevantRowCount', file /Users/jruderman/mozilla-central/layout/tables/nsCellMap.cpp, line 2841 Crash [@ nsCellMapColumnIterator::GetNextFrame] null deref.
taking
Assignee: nobody → bernd_mozilla
Status: NEW → ASSIGNED
Attachment #443814 -
Attachment is patch: true
Attachment #443814 -
Flags: review?(bzbarsky)
Comment on attachment 443814 [details] [diff] [review] patch I pushed this over the try server
![]() |
||
Comment 4•11 years ago
|
||
Comment on attachment 443814 [details] [diff] [review] patch r=bzbarsky
Attachment #443814 -
Flags: review?(bzbarsky) → review+
http://hg.mozilla.org/mozilla-central/rev/680691b2f18f
Status: ASSIGNED → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
Updated•10 years ago
|
Crash Signature: [@ nsCellMapColumnIterator::GetNextFrame]
You need to log in
before you can comment on or make changes to this bug.
Description
•