Closed Bug 406904 Opened 17 years ago Closed 17 years ago

Crash [@ VerifySameTree] with XBL

Categories

(Core :: XBL, defect, P3)

x86
macOS
defect

Tracking

()

RESOLVED FIXED

People

(Reporter: jruderman, Assigned: bzbarsky)

References

Details

(Keywords: assertion, crash, testcase)

Crash Data

Attachments

(2 files)

Loading testcase 1 triggers: ###!!! ASSERTION: SetMayHaveFrame failed?: 'mContent->MayHaveFrame()', file /Users/jruderman/trunk/mozilla/layout/generic/nsFrame.cpp, line 409 frame: Text(-1) (0x2490020) style: 0x248e108 :-moz-non-element {} ###!!! ASSERTION: Wrong parent style context: 'Error', file /Users/jruderman/trunk/mozilla/layout/base/nsFrameManager.cpp, line 822 Wrong parent style context: should be using: style: 0x248e2a8 {} Crash [@ VerifySameTree] [@ nsStyleContext::GetParent].
Attached file testcase 2 (deleted) —
This testcase only triggers: ###!!! ASSERTION: element not in the document: 'doc', file /Users/jruderman/trunk/mozilla/layout/base/nsChildIterator.cpp, line 62 The difference between testcase 1 and testcase 2 is that a text node in the XBL binding has been replaced with an empty span element.
Related to bug 342954?
Yes, indeed. And my patch for that bug fixes these testcases, incidentally. ;)
Depends on: 342954
Flags: blocking1.9? → blocking1.9+
Priority: -- → P3
Assignee: nobody → bzbarsky
Is this fixed now that bug 342954 has landed? Feel free to renominate if not.
Flags: tracking1.9+ → tracking1.9-
I think it should be fixed. Jesse, could you retest, and land the tests as needed?
Flags: in-testsuite?
I retested and everything seems happy. Crashtests checked in.
Flags: in-testsuite? → in-testsuite+
Status: NEW → RESOLVED
Closed: 17 years ago
Resolution: --- → FIXED
Crash Signature: [@ VerifySameTree]
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: