Closed
Bug 572582
Opened 14 years ago
Closed 14 years ago
Crash [@ IsPercentageAware] with ZWSP, bidi, empty text node
Categories
(Core :: Layout: Text and Fonts, defect)
Tracking
()
RESOLVED
FIXED
| Tracking | Status | |
|---|---|---|
| status1.9.2 | --- | unaffected |
| status1.9.1 | --- | unaffected |
People
(Reporter: jruderman, Assigned: smontagu)
References
(Blocks 1 open bug)
Details
(Keywords: assertion, crash, testcase, Whiteboard: [sg:dos (critical w/out frame-poisoning)])
Crash Data
Attachments
(3 files)
###!!! ASSERTION: unexpected flow: 'mFrames.ContainsFrame(nextInFlow)', file layout/generic/nsInlineFrame.cpp, line 537 ###!!! ASSERTION: StealFrame: can't find aChild: 'removed', file layout/generic/nsContainerFrame.cpp, line 1047 ###!!! ASSERTION: StealFrame failure: 'NS_SUCCEEDED(rv)', file layout/generic/nsContainerFrame.cpp, line 1136 Crash [@ IsPercentageAware] with the frame poison address.
|
Reporter | |
Comment 1•14 years ago
|
||
|
Assignee | |
Updated•14 years ago
|
Assignee: nobody → smontagu
Status: NEW → ASSIGNED
|
|
Assignee | |
Comment 2•14 years ago
|
||
This feels a little duct-tape-ish :(
Attachment #452540 -
Flags: review?(roc)
Attachment #452540 -
Flags: review?(roc) → review+
|
|
Assignee | |
Comment 3•14 years ago
|
||
http://hg.mozilla.org/mozilla-central/rev/387c04a4f4bd
Status: ASSIGNED → RESOLVED
Closed: 14 years ago
status1.9.2:
--- → unaffected
Flags: in-testsuite+
Resolution: --- → FIXED
|
||
Updated•14 years ago
|
Group: core-security
status1.9.1:
--- → unaffected
|
||
Updated•13 years ago
|
Crash Signature: [@ IsPercentageAware]
You need to log in
before you can comment on or make changes to this bug.
Description
•