Closed
Bug 486428
Opened 16 years ago
Closed 16 years ago
Crash [@ InlineBackgroundData::GetNextContinuation] with -moz-column, float
Categories
(Core :: Layout, defect)
Tracking
()
RESOLVED
WORKSFORME
People
(Reporter: jruderman, Unassigned)
References
Details
(Keywords: assertion, crash, testcase, Whiteboard: [sg:critical?])
Crash Data
Attachments
(2 files)
No description provided.
|
Reporter | |
Comment 1•16 years ago
|
||
###!!! ASSERTION: frame was not removed from primary frame map before destruction or was readded to map after being removed: 'Not Reached', file /Users/jruderman/central/layout/base/nsFrameManager.cpp, line 732
+ touches 0xddddddf5
|
|
Reporter | |
Updated•16 years ago
|
Whiteboard: [sg:critical?]
|
||
Comment 2•16 years ago
|
||
(In reply to comment #1)
> ###!!! ASSERTION: frame was not removed from primary frame map before
> destruction or was readded to map after being removed: 'Not Reached', file
> /Users/jruderman/central/layout/base/nsFrameManager.cpp, line 732
The stack for this assertion makes it look like another duplicate of bug 463350. (It goes through DeleteNextInFlowChild.) However, the first testcase seems like it could be different.
Depends on: 463350
|
|
Reporter | |
Comment 3•16 years ago
|
||
WFM on mozilla-central. No assertions, no crashes.
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → WORKSFORME
|
Assignee | |
Updated•14 years ago
|
Crash Signature: [@ InlineBackgroundData::GetNextContinuation]
|
||
Updated•9 years ago
|
Group: core-security → core-security-release
|
||
Updated•9 years ago
|
Group: core-security-release
You need to log in
before you can comment on or make changes to this bug.
Description
•