Closed Bug 437566 Opened 16 years ago Closed 16 years ago

Crash [@ nsSpaceManager::GetPrevBand] with floats, svg

Categories

(Core :: Layout: Floats, defect)

x86
macOS
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 437565

People

(Reporter: jruderman, Unassigned)

References

Details

(Keywords: assertion, crash, testcase, Whiteboard: [sg:dupe 437565])

Crash Data

Attachments

(1 file)

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1a1pre) Gecko/2008053113 Minefield/3.1a1pre

Steps to reproduce:
1. Load the testcase in a debug build of Firefox.

Result:

###!!! ASSERTION: aBandRect should be first rect within its band: '!aBandRect || aBandRect == mBandList.Head() || aBandRect->Prev()->mBottom != aBandRect->mBottom', file /Users/jruderman/central/layout/generic/nsSpaceManager.h, line 475

Crash dereferencing 0xc0000017 (note the first digit -- this is not a null deref!)

The assertion also occurs in bug 410232, but that bug has a different testcase, no crash, and is public.
Double-clicking "submit" button in Safari = fail.
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → DUPLICATE
Whiteboard: [sg:dupe 437565]
Crash Signature: [@ nsSpaceManager::GetPrevBand]
Group: core-security
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: