Closed
Bug 343588
Opened 18 years ago
Closed 18 years ago
"ASSERTION: index out of range" involving rowspan (within nsCellMap::RebuildConsideringRows)
Categories
(Core :: Layout: Tables, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: jruderman, Assigned: bernd_mozilla)
References
Details
(5 keywords)
Attachments
(3 files)
|
(deleted),
application/xhtml+xml
|
Details | |
|
(deleted),
text/plain
|
Details | |
|
(deleted),
patch
|
bzbarsky
:
review+
bzbarsky
:
superreview+
|
Details | Diff | Splinter Review |
This testcase causes:
###!!! ASSERTION: index out of range: '0 <= aIndex && aIndex < Count()', file ../../../dist/include/xpcom/nsVoidArray.h, line 81
This is with nsVoidArray::ElementAt (not FastElementAt) so I don't think this is a memory-safety violation.
This happens both without and with the patch in bug 343087 comment 2.
|
Reporter | |
Comment 1•18 years ago
|
||
|
|
Reporter | |
Comment 2•18 years ago
|
||
|
||
Comment 5•18 years ago
|
||
I think I have a case (unminised) that crashes, but not crashes when I have the patch applied.
Comment on attachment 228106 [details] [diff] [review]
patch
I don't know why I thought I have to take aNumOrigCols instead of numCols inside nsCellMap::RebuildConsideringRows. Its plain wrong in the patch for bug 339246. Probably I played with it and then forgot to remove it.
Attachment #228106 -
Flags: superreview?(bzbarsky)
Attachment #228106 -
Flags: review?(bzbarsky)
|
||
Comment 7•18 years ago
|
||
Comment on attachment 228106 [details] [diff] [review]
patch
Sure.
Attachment #228106 -
Flags: superreview?(bzbarsky)
Attachment #228106 -
Flags: superreview+
Attachment #228106 -
Flags: review?(bzbarsky)
Attachment #228106 -
Flags: review+
fixed on trunk
Status: ASSIGNED → RESOLVED
Closed: 18 years ago
Resolution: --- → FIXED
fixed on branches by the cellmap branch patch
Keywords: fixed1.8.0.7,
fixed1.8.1
You need to log in
before you can comment on or make changes to this bug.
Description
•