Closed
Bug 700112
Opened 13 years ago
Closed 13 years ago
Crash [@ nsLineBox::IsEmpty ]
Categories
(Core :: Layout: Block and Inline, defect)
Core
Layout: Block and Inline
Tracking
()
RESOLVED
DUPLICATE
of bug 696175
| Tracking | Status | |
|---|---|---|
| firefox10 | - | --- |
People
(Reporter: bc, Unassigned)
References
(Blocks 2 open bugs, )
Details
(Keywords: crash, regression, testcase)
Crash Data
Attachments
(2 files)
1. http://www.citizen.org/Page.aspx?pid=183 or
http://www.citizen.org/
2. Poison Frame Crash Nightly Linux, Mac, Windows
Reason: KERN_PROTECTION_FAILURE at address: 0xf0dea7ff
0x05714bf1 in nsLineBox::IsEmpty (this=0x25717338) at /work/mozilla/builds/nightly/mozilla/layout/generic/nsLineBox.cpp:274
274 return mFirstChild->IsEmpty();
|
||
Comment 1•13 years ago
|
||
We're using a nsPlaceholderFrame::mCachedLineBox which was destroyed.
|
|
||
Comment 2•13 years ago
|
||
The first stack is when destroying the nsLineBox - this is a result of
PullFrameFrom pulling the last frame on the line; the pulled frame is
the parent of the placeholder. The second stack is the crash when
using the placeholder's cached nsLineBox pointer.
|
||
Updated•13 years ago
|
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → DUPLICATE
|
||
Updated•13 years ago
|
You need to log in
before you can comment on or make changes to this bug.
Description
•