Closed Bug 865602 Opened 12 years ago Closed 12 years ago

Crash [@ nsCSSFrameConstructor::CreateContinuingFrame] with -moz-column, fieldset, abs pos

Categories

(Core :: Layout, defect)

defect
Not set
critical

Tracking

()

RESOLVED FIXED
mozilla23

People

(Reporter: jruderman, Assigned: MatsPalmgren_bugz)

References

Details

(Keywords: crash, testcase)

Crash Data

Attachments

(5 files)

No description provided.
Attached file stack
Assignee: nobody → matspal
Attached patch fix+testSplinter Review
I think it's OK for a fieldset overflow container to have a null child block frame. https://tbpl.mozilla.org/?tree=Try&rev=a03cc5df0174
Attached file frame tree with fix
Here's the fully reflowed frame tree with the fix.
Crash Signature: [@ nsCSSFrameConstructor::CreateContinuingFrame(nsPresContext*, nsIFrame*, nsIFrame*, bool)]
OS: Mac OS X → All
Hardware: x86_64 → All
Attachment #741782 - Flags: review?(roc)
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla23
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: