675713 - layout/base/crashtests/675246-1.xhtml asserts

Status: NEW

(Core :: Printing: Output, defect)

Description

[:Ms2ger (he/him; ⌚ UTC+1/+2)]

http://tinderbox.mozilla.org/showlog.cgi?tree=Mozilla-Inbound&errorparser=unittest&logfile=1312224708.1312225574.19662.gz&buildtime=1312224708&buildname=Rev3%20MacOSX%20Snow%20Leopard%2010.6.2%20mozilla-inbound%20debug%20test%20crashtest&fulltext=1#err0


###!!! ASSERTION: can't mark frame dirty during reflow: '!mIsReflowing', file /builds/slave/m-in-osx64-dbg/build/layout/base/nsPresShell.cpp, line 3495

###!!! ASSERTION: Primary child list can have at most one frame in it: 'aListName || aChildList.IsEmpty() || aChildList.OnlyChild()', file /builds/slave/m-in-osx64-dbg/build/layout/generic/nsCanvasFrame.cpp, line 132

Comment 1

[:Ms2ger (he/him; ⌚ UTC+1/+2)]

http://hg.mozilla.org/integration/mozilla-inbound/rev/445abd683ea4

Comment 2

[Boris Zbarsky [:bzbarsky]]

That first assert happens because nsCSSFrameConstructor::CreateContinuingTableFrame adds fixed-pos frames which calls nsAbsoluteContainingBlock::InsertFrames which of course tries to mark things dirty.

The second assert happens because nsCSSFrameConstructor::ReplicateFixedFrames calls nsCanvasFrame::SetInitialChildList with a list that has two placeholders in it.  I believe we may have existing bugs on that....

Comment 3

[Marco Bonardo [:mak]]

http://hg.mozilla.org/mozilla-central/rev/445abd683ea4
leaving open to solve assertions