Closed Bug 362630 Opened 18 years ago Closed 18 years ago

Crash [@ nsSpaceManager::BandRect::IsOccupiedBy] on print preview with large border, float: left and overflow:scroll

Categories

(Core :: Layout, defect)

x86
Windows XP
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: martijn.martijn, Unassigned)

References

Details

(Keywords: crash, regression, testcase)

Crash Data

Attachments

(2 files)

See upcoming testcase, which crashes on print preview.
This seems to have regressed between 2006-10-18 and 2006-10-19:
http://bonsai.mozilla.org/cvsquery.cgi?treeid=default&module=all&branch=HEAD&branchtype=match&dir=&file=&filetype=match&who=&whotype=match&sortby=Date&hours=2&date=explicit&mindate=2006-10-18+05&maxdate=2006-10-19+06&cvsroot=%2Fcvsroot
It seems to me a regression from bug 343445, somehow.

In a debug build, I get these assertions prior to the crash:
###!!! ASSERTION: aFrame is already associated with a region: '!GetFrameInfoFor(
aFrame)', file c:/mozilla/mozilla/layout/generic/nsSpaceManager.cpp, line 812
WARNING: nsBlockFrame::CheckFloats: Explicit float list is out of sync with floa
t cache: file c:/mozilla/mozilla/layout/generic/nsBlockFrame.cpp, line 7294
###!!! ASSERTION: no bands: '!mBandList.IsEmpty()', file c:/mozilla/mozilla/layo
ut/generic/nsSpaceManager.cpp, line 880
Attached file testcase (deleted) —
Talkback ID: TB26797474Z
nsSpaceManager::BandRect::IsOccupiedBy  [mozilla\layout\generic\nsspacemanager.cpp, line 1380]
nsSpaceManager::RemoveTrailingRegions  [mozilla\layout\generic\nsspacemanager.cpp, line 854]
nsBlockFrame::CheckFloats  [mozilla\layout\generic\nsblockframe.cpp, line 7321]
nsBlockFrame::Reflow  [mozilla\layout\generic\nsblockframe.cpp, line 1027]
Attached file backtrace from debug build (deleted) —
Backtrace which contains backtrace from the first assertion and the crash itself.
This is worksforme, using:
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a3pre) Gecko/20070319 Minefield/3.0a3pre
Status: NEW → RESOLVED
Closed: 18 years ago
Resolution: --- → WORKSFORME
Crash Signature: [@ nsSpaceManager::BandRect::IsOccupiedBy]
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: