Closed
Bug 895264
Opened 11 years ago
Closed 11 years ago
"ASSERTION: negative length" with bidi, caret browsing, selection tweaking
Categories
(Core :: Layout: Text and Fonts, defect)
Tracking
()
RESOLVED
FIXED
Tracking | Status | |
---|---|---|
firefox-esr17 | --- | unaffected |
firefox-esr24 | --- | fixed |
b2g18 | --- | unaffected |
b2g-v1.1hd | --- | unaffected |
b2g-v1.2 | --- | unaffected |
People
(Reporter: jruderman, Unassigned)
References
(Blocks 1 open bug)
Details
(Keywords: assertion, testcase)
Attachments
(2 files)
1. Create a profile with the following prefs.js:
user_pref("accessibility.browsewithcaret", true);
user_pref("bidi.browser.ui", true);
user_pref("bidi.direction", 2);
2. Load the testcase
3. Click to the right of the 'X'
###!!! ASSERTION: negative length: 'GetContentEnd() - mContentOffset >= 0', file layout/generic/nsTextFrame.h, line 435
Reporter | ||
Comment 1•11 years ago
|
||
Updated•11 years ago
|
Status: NEW → RESOLVED
Closed: 11 years ago
status-firefox23:
--- → fixed
status-firefox24:
--- → fixed
status-firefox25:
--- → fixed
Resolution: --- → FIXED
Updated•11 years ago
|
Flags: in-testsuite?
Comment 3•11 years ago
|
||
Is Firefox 22 unaffected by this?
Comment 4•11 years ago
|
||
The bug is not reproducible on trunk builds before 2013-05-08, so Firefox 22 should be unaffected, but I haven't tested.
Updated•11 years ago
|
status-firefox-esr17:
--- → unaffected
status-firefox-esr24:
--- → fixed
Updated•11 years ago
|
status-b2g18:
--- → unaffected
status-b2g-v1.1hd:
--- → unaffected
status-b2g-v1.2:
--- → unaffected
Updated•10 years ago
|
Group: core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•