Closed
Bug 337476
Opened 19 years ago
Closed 18 years ago
"ASSERTION: invalid previous frame", "ASSERTION: unexpected child frame type", frames dropped (testcase involves table-caption and XUL)
Categories
(Core :: Layout: Tables, defect)
Core
Layout: Tables
Tracking
()
RESOLVED
FIXED
People
(Reporter: jruderman, Unassigned)
References
Details
(Keywords: assertion, testcase, Whiteboard: [sg:investigate] 1.9 trunk)
Attachments
(1 file)
(deleted),
application/vnd.mozilla.xul+xml
|
Details |
The testcase produces two assertions when loaded:
###!!! ASSERTION: invalid previous frame: '!aPrevFrame', file /Users/admin/trunk/mozilla/layout/tables/nsTableOuterFrame.cpp, line 246
###!!! ASSERTION: unexpected child frame type: 'PR_FALSE', file /Users/admin/trunk/mozilla/layout/tables/nsTableOuterFrame.cpp, line 228
With a patch for bug 334514, I also get a message that 23 frames got dropped on the floor when I reload or close the page. Since other bugs involving dropped frames have been security holes (such as bug 268575), I'm marking this as security-sensitive for now even though I can't figure out how to make this one crash. I'm curious why I can't get this one to crash.
Reporter | ||
Comment 1•19 years ago
|
||
Updated•19 years ago
|
Flags: blocking1.9a2?
Comment 2•19 years ago
|
||
I don't get these assertions in ff2. I do get a single "waaah!" from nsXULPrototypeDocument.cpp, line 869
Whiteboard: [sg:investigate] 1.9 trunk
Reporter | ||
Comment 3•19 years ago
|
||
Bug 323493 involves some of the same assertions.
Comment 4•18 years ago
|
||
I think I have a fix for this, at least the fix I have for the crashes in
bug 341858 and bug 343270 also fixes the assertions here...
Reporter | ||
Comment 5•18 years ago
|
||
Bug 348126 might be a dup, and does have a crashing testcase.
fixed by the checkin for bug bug 341858
Status: NEW → RESOLVED
Closed: 18 years ago
Resolution: --- → FIXED
Updated•18 years ago
|
Flags: blocking1.9a2?
Updated•18 years ago
|
Flags: wanted1.8.1.x-
Updated•17 years ago
|
Group: security
Updated•17 years ago
|
Flags: in-testsuite?
You need to log in
before you can comment on or make changes to this bug.
Description
•