Closed
Bug 890775
Opened 11 years ago
Closed 11 years ago
"ASSERTION: Ancestors of nodes with frames to be constructed lazily should have frames" with <xbl:children>
Categories
(Core :: XBL, defect)
Tracking
()
VERIFIED
FIXED
mozilla25
Tracking | Status | |
---|---|---|
firefox23 | --- | unaffected |
firefox24 | --- | unaffected |
firefox25 | --- | verified |
firefox-esr17 | --- | unaffected |
b2g18 | --- | unaffected |
People
(Reporter: jruderman, Assigned: mrbkap)
References
Details
(4 keywords)
Attachments
(3 files)
123 bytes,
application/xhtml+xml
|
Details | |
1.61 KB,
patch
|
peterv
:
review+
|
Details | Diff | Splinter Review |
12.53 KB,
patch
|
peterv
:
review+
|
Details | Diff | Splinter Review |
###!!! ASSERTION: Ancestors of nodes with frames to be constructed lazily should have frames: '!noPrimaryFrame', file layout/base/nsCSSFrameConstructor.cpp, line 6249 Regression from bug 653881? Security-sensitive because it might be related to bug 888728.
Comment 1•11 years ago
|
||
mrbkap: could this (and possibly 888728) be regressions from your bug 653881 landing?
Blocks: 653881
Flags: needinfo?(mrbkap)
Assignee | ||
Comment 2•11 years ago
|
||
Both bugs are. I'll attach a patch here to fix it.
Assignee: nobody → mrbkap
Flags: needinfo?(mrbkap)
Assignee | ||
Comment 3•11 years ago
|
||
Attachment #773560 -
Flags: review?(peterv)
Assignee | ||
Comment 4•11 years ago
|
||
With this patch, <xbl:children> elements that aren't part of a binding's <xbl:content> (generated into a bound document) no longer act as special elements and instead act more like normal elements. Note that they aren't rendered (I think because we don't render xbl elements)?
Attachment #773563 -
Flags: review?(peterv)
Updated•11 years ago
|
Attachment #773563 -
Flags: review?(peterv) → review+
Updated•11 years ago
|
Attachment #773560 -
Flags: review?(peterv) → review+
Assignee | ||
Comment 5•11 years ago
|
||
remote: https://hg.mozilla.org/integration/mozilla-inbound/rev/4c7d491276d9 remote: https://hg.mozilla.org/integration/mozilla-inbound/rev/09cb9725492e
Updated•11 years ago
|
status-b2g18:
--- → unaffected
status-firefox23:
--- → unaffected
status-firefox24:
--- → unaffected
status-firefox25:
--- → affected
status-firefox-esr17:
--- → unaffected
Comment 6•11 years ago
|
||
https://hg.mozilla.org/mozilla-central/rev/4c7d491276d9 https://hg.mozilla.org/mozilla-central/rev/09cb9725492e
Status: NEW → RESOLVED
Closed: 11 years ago
Flags: in-testsuite+
Resolution: --- → FIXED
Target Milestone: --- → mozilla25
Updated•11 years ago
|
Keywords: sec-critical
Comment 7•11 years ago
|
||
Confirmed assertion FF25, 2013-07-11. Verified fixed FF25, 2013-10-01.
Status: RESOLVED → VERIFIED
Updated•10 years ago
|
Group: core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•