Open Bug 757269 Opened 12 years ago Updated 2 years ago

###!!! ASSERTION: Computed overflow area must contain frame bounds

Categories

(Core :: Layout, defect)

Product:
Core
Component:
Layout
Type:
defect

Tracking

()

People

(Reporter: decoder, Unassigned)

References

Details

(Keywords: assertion, testcase) 

The following HTML code (save to .xhtml file) triggers an assertion on Fennec Native (mozilla-central, debug build, rev 95437bcc43dc):


<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<script>
allNodes = [];
allNodes[0] = document.documentElement;
allNodes[26] = document.createElementNS("http://www.w3.org/1999/xhtml", "tr");
allNodes[28] = document.createElementNS("http://www.w3.org/1999/xhtml", "td");
allNodes[29] = document.createElementNS("http://www.w3.org/1999/xhtml", "input");
(allNodes[28] || allNodes[26] || allNodes[7] || allNodes[5] || document.documentElement).appendChild(allNodes[29]);
(allNodes[26] || allNodes[7] || allNodes[5] || document.documentElement).appendChild(allNodes[28]);
(allNodes[7] || allNodes[5] || document.documentElement).appendChild(allNodes[26]);
 allNodes[28].style.cssFloat = "left";
 allNodes[0].style.fontSize = "536870913in";
 allNodes[26].style.lineHeight = "1";
</script>
</head>
</html>


Full assertion:  ###!!! ASSERTION: Computed overflow area must contain frame bounds: 'aNewSize.width == 0 || aNewSize.height == 0 || r->width == nscoord_MAX || r->height == nscoord_MAX || (mState & NS_FRAME_SVG_LAYOUT) || r->Contains(nsRect(nsPoint(0,0), aNewSize))', file layout/generic/nsFrame.cpp, line 6778
Happens on Mac too.
Blocks: randomstyles
Component: General → Layout
Keywords: assertion, testcase
Product: Fennec Native → Core
QA Contact: general → layout
I can no longer reproduce on Mac. Haven't tried Android.
OS: Android → All
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.