From:  bugzilla-request-daemon@mozilla.org
Date:  18 Jan 2006 14:58:53 Hong Kong Time
Newsgroup:  news.mozilla.org/netscape.public.mozilla.reviewers
Subject:  

superreview requested: [Bug 323741] "ASSERTION: index out of range" with this MathML testcase : [Attachment 208832] patch

NNTP-Posting-Host:  207.126.111.202

rbs@maths.uq.edu.au has asked Robert O'Callahan (Novell) 
for superreview:
Bug 323741: "ASSERTION: index out of range" with this MathML testcase
https://bugzilla.mozilla.org/show_bug.cgi?id=323741

Attachment 208832: patch
https://bugzilla.mozilla.org/attachment.cgi?id=208832&action=edit

------- Additional Comments from rbs@maths.uq.edu.au
The bug is at paint() due to unset values resulting from the fact that a
troublesome frame hasn't been reflowed. The troublesome frame happens to be a
child of  which is a leaf frame... It is not reflowed because it was
not supposed to be there in the first place. So the fix is to not create those
bogus children to begin with.