Closed Bug 655462 Opened 14 years ago Closed 13 years ago

"ASSERTION: aPrevFrame must be the last continuation in its chain!" with columns, abs pos

Categories

(Core :: Layout, defect)

x86
macOS
defect
Not set
normal

Tracking

()

RESOLVED FIXED
mozilla10
Tracking Status
firefox6 - ---

People

(Reporter: jruderman, Assigned: ehsan.akhgari)

References

Details

(Keywords: assertion, testcase, Whiteboard: jesse nominated)

Attachments

(3 files)

Attached file testcase (deleted) —
###!!! ASSERTION: aPrevFrame must be the last continuation in its chain!: '!aPrevFrame || (!aPrevFrame->GetNextContinuation() || IS_TRUE_OVERFLOW_CONTAINER(aPrevFrame->GetNextContinuation())) && !IS_TRUE_OVERFLOW_CONTAINER(aPrevFrame)', file layout/base/nsFrameManager.cpp, line 499 Might be a regression from today's cedar merge: http://hg.mozilla.org/mozilla-central/pushloghtml?changeset=62941612320d
Attached file stack trace (mac debug) (deleted) —
Whiteboard: jesse nominated
tracking-, since even *if* this were a sign of worse problems to come, they'd be problems that would be mitigated by frame poisoning. Also, what do you mean by "Might be a regression"?
> tracking-, since even *if* this were a sign of worse problems to come, they'd > be problems that would be mitigated by frame poisoning. And web sites don't use columns with abs pos, so this shouldn't be a stability problem. Fair enough. > Also, what do you mean by "Might be a regression"? I got several reports from the fuzzer soon after the merge, which makes me think it's not a long-standing bug.
Caused by part 1/2 of bug 10209 (14fe8a6cfd45 or b5c0b85194d6). Ehsan, hopefully one of your followup patches fixes this.
Blocks: 10209
My followup patches do seem to fix this.
Assignee: nobody → ehsan
Attached patch Crashtest (deleted) — Splinter Review
The crash has been fixed. Here's the crashtest.
Attachment #563581 - Flags: review?(roc)
Status: NEW → RESOLVED
Closed: 13 years ago
Flags: in-testsuite+
Resolution: --- → FIXED
Target Milestone: --- → mozilla10
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: