Closed Bug 897384 Opened 11 years ago Closed 9 years ago

"ASSERTION: Abs pos whose parent is not the abs pos containing block?" and crash with SVG requiredFeatures, foreignObject

Categories

(Core :: SVG, defect)

x86_64
macOS
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 1182496

People

(Reporter: jruderman, Unassigned)

References

Details

(Keywords: assertion, crash, testcase)

Attachments

(2 files)

Attached file testcase (deleted) —
###!!! ASSERTION: Abs pos whose parent is not the abs pos containing block?: 'aNewFrame->GetParent() == mAbsoluteItems.containingBlock', file layout/base/nsCSSFrameConstructor.cpp, line 1165 ###!!! ASSERTION: unknown out of flow frame type: 'disp->mDisplay == NS_STYLE_DISPLAY_POPUP', file layout/generic/nsHTMLReflowState.cpp, line 679 With a more complicated testcase, it can also crash (frame poisoning).
Attached file stack (deleted) —
Testcase loads just fine in an up-to-date debug build. (No assertions, no crash.) I think this is a dupe of bug 1182496 (which was recently fixed). (Bug 1182496's reduced testcase, attachment 8633672 [details], triggered the same assertions in comment 0 here -- see bug 1182496 comment 4 -- and it looks like a "more complicated" version of the testcase here, and it did indeed crash w/ frame poisoning as Jesse foretold in comment 0.)
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: