Closed
Bug 322656
Opened 19 years ago
Closed 19 years ago
Crash [@ nsCachedStyleData::GetStyleData] with evil MathML testcase, involving mrow:hover {display: -moz-box;}
Categories
(Core :: MathML, defect)
Tracking
()
VERIFIED
FIXED
People
(Reporter: martijn.martijn, Assigned: rbs)
References
Details
(Keywords: crash, testcase)
Crash Data
Attachments
(4 files)
|
(deleted),
application/xhtml+xml
|
Details | |
|
(deleted),
text/plain
|
Details | |
|
(deleted),
patch
|
bzbarsky
:
review+
bzbarsky
:
superreview+
|
Details | Diff | Splinter Review |
|
(deleted),
application/xhtml+xml
|
Details |
See upcoming testcase, it crashes Mozilla when hovering over the text.
|
Reporter | |
Comment 1•19 years ago
|
||
|
|
Reporter | |
Comment 2•19 years ago
|
||
|
|
Reporter | |
Comment 3•19 years ago
|
||
Also crashes Mozilla1.7, so no recent regression.
Attachment #207820 -
Flags: superreview?(bzbarsky)
Attachment #207820 -
Flags: review?(bzbarsky)
this is now wfm with the patch for bug 322185
|
||
Comment 6•19 years ago
|
||
rbs, is the patch in this bug still desirable?
The patch is still worthwhile. The bug has exposed that some internal pointers are outdated when child frames of <maction> are changed dynamically. Here is another testcase that illustrates the problem without the XUL display style.
Attachment #207867 -
Attachment mime type: application/xhtml+xm → application/xhtml+xml
|
|
||
Updated•19 years ago
|
Summary: Crash [@ nsCachedStyleData::GetStyleData] with evil MathML testcase, involving mrow:hover {display: -moz-box;} → Crash [@ nsCachedStyleData::GetStyleData] with evil MathML testcase, involving mrow:hover {display: -moz-box;}
|
||
Comment 8•19 years ago
|
||
Comment on attachment 207820 [details] [diff] [review]
fix
r+sr=bzbarsky
Attachment #207820 -
Flags: superreview?(bzbarsky)
Attachment #207820 -
Flags: superreview+
Attachment #207820 -
Flags: review?(bzbarsky)
Attachment #207820 -
Flags: review+
Checked in.
Status: NEW → RESOLVED
Closed: 19 years ago
Resolution: --- → FIXED
|
|
Reporter | |
Comment 10•19 years ago
|
||
Verified fixed, using latest nighlty trunk build.
Status: RESOLVED → VERIFIED
|
|
||
Comment 11•18 years ago
|
||
Is this needed on branches?
|
|
Reporter | |
Comment 12•18 years ago
|
||
(In reply to comment #11)
> Is this needed on branches?
No, it doesn't crash with:
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061002 Firefox/2.0
So I guess it's not needed on branch.
|
||
Updated•13 years ago
|
Crash Signature: [@ nsCachedStyleData::GetStyleData]
You need to log in
before you can comment on or make changes to this bug.
Description
•