Crash [@ nsContentUtils::ContentIsDescendantOf] with xul:menuitem, xul:popup

RESOLVED FIXED in mozilla2.0b1

Status

()

Core
XUL
--
critical
RESOLVED FIXED
8 years ago
7 years ago

People

(Reporter: Jesse Ruderman, Assigned: mats)

Tracking

(Blocks: 2 bugs, {crash, testcase})

Trunk
mozilla2.0b1
crash, testcase
Points:
---
Dependency tree / graph
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(Not tracked)

Details

(crash signature)

Attachments

(2 attachments)

(Reporter)

Description

8 years ago
Created attachment 451151 [details]
testcase (crashes Firefox when loaded)
(Reporter)

Comment 1

8 years ago
Created attachment 451152 [details]
crash report from mac os x crash reporter
(Reporter)

Comment 2

8 years ago
Before the crash, I get:

###!!! ASSERTION: not in child list: 'found', file layout/base/nsLayoutUtils.cpp, line 278

###!!! ASSERTION: unexpected child list: 'Error', file layout/generic/nsBlockFrame.cpp, line 4928

###!!! ASSERTION: Why did we get called?: '!aChildContent->GetPrimaryFrame() || !aState.mSetPrimaryFrames || aChildContent->GetPrimaryFrame()->GetContent() != aChildContent', file layout/base/nsCSSFrameConstructor.cpp, line 2190

###!!! ASSERTION: identical: 'pseudoType1 != pseudoType2', file layout/base/nsGenConList.cpp, line 136

###!!! ASSERTION: identical: 'pseudoType1 != pseudoType2', file layout/base/nsGenConList.cpp, line 136

###!!! ASSERTION: Losing track of existing primary frame: '!aFrame || !mPrimaryFrame || aFrame == mPrimaryFrame', file ../../dist/include/nsIContent.h, line 875

###!!! ASSERTION: null check on startContent should be sufficient to null check nodeContent as well, since if nodeContent is for the root, startContent (which is before it) must be too: 'nodeContent || !startContent', file layout/base/nsCounterManager.cpp, line 165

###!!! ASSERTION: The possible descendant is null!: 'aPossibleDescendant', file content/base/src/nsContentUtils.cpp, line 1441
(Reporter)

Updated

8 years ago
Attachment #451151 - Attachment mime type: application/octet-stream → application/vnd.mozilla.xul+xml
(Assignee)

Comment 3

8 years ago
The patch in bug 536720 fixes this and includes the test here.
Assignee: nobody → matspal
Depends on: 536720
OS: Mac OS X → All
Hardware: x86 → All
(Assignee)

Comment 4

8 years ago
Fixed by bug 536720.
Status: NEW → RESOLVED
Last Resolved: 8 years ago
Flags: in-testsuite+
Resolution: --- → FIXED
Target Milestone: --- → mozilla1.9.3a6
Crash Signature: [@ nsContentUtils::ContentIsDescendantOf]
You need to log in before you can comment on or make changes to this bug.