Closed
Bug 571653
Opened 14 years ago
Closed 12 years ago
Crash [@ nsHTMLFramesetFrame::GetSizeOfChildAt] [@ nsHTMLFramesetFrame::GetDesiredSize] with nested frameset
Categories
(Core :: Layout: Images, Video, and HTML Frames, defect)
Tracking
()
RESOLVED
WORKSFORME
Tracking | Status | |
---|---|---|
blocking2.0 | --- | - |
People
(Reporter: jruderman, Unassigned)
References
Details
(Keywords: crash, testcase, Whiteboard: [sg:dos])
Crash Data
Attachments
(2 files)
Yo dawg.
Reporter | ||
Comment 1•14 years ago
|
||
Reporter | ||
Comment 2•14 years ago
|
||
732 PRInt32 row = aIndexInParent / mNumCols;
mNumCols is 0. This is a divide-by-zero crash.
Comment 4•14 years ago
|
||
> mNumCols is 0. This is a divide-by-zero crash.
Is this code recent? Or have we had it all along?
Reporter | ||
Updated•14 years ago
|
Summary: Crash [@ nsHTMLFramesetFrame::GetSizeOfChildAt] with nested frameset → Crash [@ nsHTMLFramesetFrame::GetSizeOfChildAt] [@ nsHTMLFramesetFrame::GetDesiredSize] with nested frameset
Reporter | ||
Comment 5•14 years ago
|
||
EXC_BAD_ACCESS!? bp-c1029988-b9c6-403c-a888-2d0462101119
blocking2.0: --- → ?
Reporter | ||
Comment 6•14 years ago
|
||
Now I'm seeing this as a 10.6-only (64-bit only?) EXC_BAD_ACCESS crash.
Comment 7•14 years ago
|
||
Reproduced successfully with Ubuntu 10.10 FF4 beta 7
blocking2.0: ? → -
Updated•14 years ago
|
Whiteboard: [sg:dos]
Assignee | ||
Updated•13 years ago
|
Crash Signature: [@ nsHTMLFramesetFrame::GetSizeOfChildAt]
[@ nsHTMLFramesetFrame::GetDesiredSize]
Crash with FF19: https://crash-stats.mozilla.com/report/index/bp-581de9a8-22cf-4839-a280-79e012121111
Crash Signature: [@ nsHTMLFramesetFrame::GetSizeOfChildAt]
[@ nsHTMLFramesetFrame::GetDesiredSize] → [@ nsHTMLFramesetFrame::GetSizeOfChildAt]
[@ nsHTMLFramesetFrame::GetDesiredSize]
[@ nsHTMLFramesetFrame::GetSizeOfChildAt(int, nsSize&, nsIntPoint&) ]
Reporter | ||
Comment 10•12 years ago
|
||
WFM, I think.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → WORKSFORME
Updated•6 years ago
|
Product: Core → Core Graveyard
Assignee | ||
Updated•6 years ago
|
Component: Layout: HTML Frames → Layout: Images
Product: Core Graveyard → Core
You need to log in
before you can comment on or make changes to this bug.
Description
•