Closed
Bug 406485
Opened 17 years ago
Closed 17 years ago
Crash [@ nsIFrame::GetNextSibling] with -moz-column, overflowing heights
Categories
(Core :: Layout, defect, P2)
Tracking
()
VERIFIED
FIXED
People
(Reporter: jruderman, Assigned: fantasai.bugs)
References
Details
(Keywords: crash, regression, testcase, Whiteboard: [sg:critical?])
Crash Data
Attachments
(3 files)
|
(deleted),
text/html
|
Details | |
|
(deleted),
patch
|
roc
:
review+
roc
:
superreview+
|
Details | Diff | Splinter Review |
|
(deleted),
patch
|
roc
:
review+
roc
:
superreview+
|
Details | Diff | Splinter Review |
Loading the testcase crashes Firefox. I think this is a regression from within the last few days.
Exception: EXC_BAD_ACCESS (0x0001)
Codes: KERN_INVALID_ADDRESS (0x0001) at 0xddddddfd
Thread 0 Crashed:
0 nsIFrame::GetNextSibling (nsIFrame.h:800)
1 nsOverflowContinuationTracker::StepForward (nsContainerFrame.cpp:1345)
2 nsOverflowContinuationTracker::Skip (nsContainerFrame.h:518)
3 nsBlockFrame::ReflowDirtyLines (nsBlockFrame.cpp:1943)
4 nsBlockFrame::Reflow (nsBlockFrame.cpp:942)
...
|
||
Comment 1•17 years ago
|
||
My MOZ_CO_DATE="Sat Dec 1 00:53:00 CST 2007" build (not clean, though) doesn't seem to crash...
|
Reporter | |
Comment 2•17 years ago
|
||
I get the same crash loading mozilla/layout/reftests/pagination/dynamic-abspos-overflow-01-cols.xhtml. I wonder why the Tinderboxen that run reftests aren't aflame.
Boris suspects this is a regression bug 404213, which fantasai fixed last night.
|
|
Reporter | |
Comment 3•17 years ago
|
||
(Boris's regression range is 2007-12-01-02 to 2007-12-02-02.)
|
||
Updated•17 years ago
|
Flags: blocking1.9? → blocking1.9+
Priority: -- → P2
That was dumb. Sorry about that. I'll attach a patch for the reftest; it was commented out.
Attachment #291244 -
Flags: superreview?(roc)
Attachment #291244 -
Flags: review?(roc)
Figured out why the reftest was failing before. This fixes and uncomments it.
Attachment #291245 -
Flags: superreview?(roc)
Attachment #291245 -
Flags: review?(roc)
Attachment #291244 -
Flags: superreview?(roc)
Attachment #291244 -
Flags: superreview+
Attachment #291244 -
Flags: review?(roc)
Attachment #291244 -
Flags: review+
Attachment #291245 -
Flags: superreview?(roc)
Attachment #291245 -
Flags: superreview+
Attachment #291245 -
Flags: review?(roc)
Attachment #291245 -
Flags: review+
Checked in by bzbarsky, nsContainerFrame.cpp 1.296
Status: ASSIGNED → RESOLVED
Closed: 17 years ago
Resolution: --- → FIXED
|
||
Comment 7•17 years ago
|
||
verified fixed using : Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.5; en-US; rv:1.9b2pre) Gecko/2007120504 Minefield/3.0b2pre. I verified using Jesse's testcase, no crash.
Status: RESOLVED → VERIFIED
|
||
Updated•17 years ago
|
Flags: in-testsuite?
|
|
||
Comment 8•17 years ago
|
||
Flags: in-testsuite? → in-testsuite+
|
||
Updated•14 years ago
|
Crash Signature: [@ nsIFrame::GetNextSibling]
You need to log in
before you can comment on or make changes to this bug.
Description
•