Bommels05/Mozilla
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix crash bug 348510. r+sr=roc, a=dveditz

Browse Source 
git-svn-id: svn://10.0.0.236/branches/MOZILLA_1_8_0_BRANCH@215144 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
bzbarsky%mit.edu
2006-11-11 03:33:51 +00:00
parent 8408d7e7cd
commit df8f95f6c8
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
mozilla/layout/base/nsCSSFrameConstructor.cpp
View File

@@ -13890,12 +13890,18 @@ nsCSSFrameConstructor::SplitToContainingBlock(nsFrameConstructorState& aState,
MarkIBSpecialPrevSibling(aState.mPresContext, blockFrame, firstInFlow);
// If we have a continuation frame, then we need to break the
// continuation.
// If we have a continuation frame, then we need to blow it away. Otherwise
// the flow will get all confused, with dangling in-flows around, and things
// pointing to the wrong things as in-flows. So just nuke the flow and we'll
// recover it when we reflow.
nsIFrame* nextInFlow = aFrame->GetNextInFlow();
if (nextInFlow) {
aFrame->SetNextInFlow(nsnull);
nextInFlow->SetPrevInFlow(nsnull);
nsIFrame* parent = nextInFlow->GetParent();
nsCOMPtr<nsIAtom> listName;
GetChildListNameFor(parent, nextInFlow, getter_AddRefs(listName));
parent->RemoveFrame(listName, nextInFlow);
}
// This is where the mothership lands and we start to get a bit