Closed Bug 571653 Opened 14 years ago Closed 12 years ago

Crash [@ nsHTMLFramesetFrame::GetSizeOfChildAt] [@ nsHTMLFramesetFrame::GetDesiredSize] with nested frameset

Categories

(Core :: Layout: Images, Video, and HTML Frames, defect)

x86
All
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME
Tracking Status
blocking2.0 --- -

People

(Reporter: jruderman, Unassigned)

References

Details

(Keywords: crash, testcase, Whiteboard: [sg:dos])

Crash Data

Attachments

(2 files)

Yo dawg.
Attached file crash report (deleted) —
732 PRInt32 row = aIndexInParent / mNumCols; mNumCols is 0. This is a divide-by-zero crash.
> mNumCols is 0. This is a divide-by-zero crash. Is this code recent? Or have we had it all along?
Summary: Crash [@ nsHTMLFramesetFrame::GetSizeOfChildAt] with nested frameset → Crash [@ nsHTMLFramesetFrame::GetSizeOfChildAt] [@ nsHTMLFramesetFrame::GetDesiredSize] with nested frameset
blocking2.0: --- → ?
Now I'm seeing this as a 10.6-only (64-bit only?) EXC_BAD_ACCESS crash.
Reproduced successfully with Ubuntu 10.10 FF4 beta 7
Whiteboard: [sg:dos]
Crash Signature: [@ nsHTMLFramesetFrame::GetSizeOfChildAt] [@ nsHTMLFramesetFrame::GetDesiredSize]
Crash Signature: [@ nsHTMLFramesetFrame::GetSizeOfChildAt] [@ nsHTMLFramesetFrame::GetDesiredSize] → [@ nsHTMLFramesetFrame::GetSizeOfChildAt] [@ nsHTMLFramesetFrame::GetDesiredSize] [@ nsHTMLFramesetFrame::GetSizeOfChildAt(int, nsSize&, nsIntPoint&) ]
WFM, I think.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → WORKSFORME
Product: Core → Core Graveyard
Component: Layout: HTML Frames → Layout: Images
Product: Core Graveyard → Core
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: