Closed Bug 337476 Opened 19 years ago Closed 18 years ago

"ASSERTION: invalid previous frame", "ASSERTION: unexpected child frame type", frames dropped (testcase involves table-caption and XUL)

Categories

(Core :: Layout: Tables, defect)

defect
Not set
normal

Tracking

()

RESOLVED FIXED

People

(Reporter: jruderman, Unassigned)

References

Details

(Keywords: assertion, testcase, Whiteboard: [sg:investigate] 1.9 trunk)

Attachments

(1 file)

(deleted), application/vnd.mozilla.xul+xml
Details
The testcase produces two assertions when loaded: ###!!! ASSERTION: invalid previous frame: '!aPrevFrame', file /Users/admin/trunk/mozilla/layout/tables/nsTableOuterFrame.cpp, line 246 ###!!! ASSERTION: unexpected child frame type: 'PR_FALSE', file /Users/admin/trunk/mozilla/layout/tables/nsTableOuterFrame.cpp, line 228 With a patch for bug 334514, I also get a message that 23 frames got dropped on the floor when I reload or close the page. Since other bugs involving dropped frames have been security holes (such as bug 268575), I'm marking this as security-sensitive for now even though I can't figure out how to make this one crash. I'm curious why I can't get this one to crash.
Attached file testcase (deleted) —
Flags: blocking1.9a2?
I don't get these assertions in ff2. I do get a single "waaah!" from nsXULPrototypeDocument.cpp, line 869
Whiteboard: [sg:investigate] 1.9 trunk
Bug 323493 involves some of the same assertions.
I think I have a fix for this, at least the fix I have for the crashes in bug 341858 and bug 343270 also fixes the assertions here...
Depends on: 341858
OS: Mac OS X 10.4 → All
Hardware: Macintosh → All
Blocks: framedest
Bug 348126 might be a dup, and does have a crashing testcase.
Blocks: 348126
fixed by the checkin for bug bug 341858
Status: NEW → RESOLVED
Closed: 18 years ago
Resolution: --- → FIXED
Flags: blocking1.9a2?
Flags: wanted1.8.1.x-
Group: security
Flags: in-testsuite?
Crashtest checked in.
Flags: in-testsuite? → in-testsuite+
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: