935765 - Crash with sticky, fieldset

Status: RESOLVED FIXED

(Core :: Layout, defect, P1)

Description

[Jesse Ruderman]

Attachment: testcase (crashes Firefox when loaded)

This testcase hits the assertion in bug 931460

###!!! ASSERTION: Scroll frame should be an ancestor of the containing block: 'cbFrame == scrolledFrame || nsLayoutUtils::IsProperAncestorFrame(scrolledFrame, cbFrame)', file layout/generic/StickyScrollContainer.cpp, line 155

Followed by a crash, bp-3cf3c687-f129-40cb-bb36-eac342131106
[@ nsLayoutUtils::IsFirstContinuationOrSpecialSibling(nsIFrame*) ]

Comment 1

[Corey Ford [:coyotebush]]

I suspect this is fundamentally the same as bug 931460 -- in particular, that <fieldset> can establish a scroll container but doesn't establish a containing block.

Comment 2

[Robert O'Callahan (:roc) (email my personal email if necessary)]

My patch in bug 931460 fixes this and adds a test.

Comment 4

[Kevin Grandon :kgrandon]

Hey Roc - Just wondering if we can close this one, or mark it as a dup of bug 931460?

Comment 5

[Robert O'Callahan (:roc) (email my personal email if necessary)]

Fixed by 931460.