bp-ca4d1671-e4ef-4328-9559-87db32110716 1. http://www.rastlos.com/wohnmobil_2010_ruegen/ruegen_kap_arkona/ 2. Crash Beta, Aurora, Nightly - Linux, Mac, Windows See also bug 358173
The nsLineLayout::ReflowFrame call is from nsFirstLetterFrame::Reflow for a first-letter frame that has no child frame. The frame tree looks very much like the same situation as in bug 578977. Applying the patch in bug 578977 locally fixes it for me. Test builds will be available shortly at: http://email@example.com/ The posted stack in bug 358173 looks like a different problem since the call comes from nsInlineFrame::ReflowInlineFrame.
Here's a better build to test (with the latest patch (v3) in bug 578977): http://firstname.lastname@example.org
Testing the Mac Debug build fixes the crash for me. Mats, do you need me to test the others as well?
Further testing shouldn't be necessary. Thanks. Fixed by bug 578977.
There's no reduced test here so let's say the tests for bug 578977 is enough.