1 files changed, 4 insertions, 0 deletions
diff --git a/layout/generic/nsContainerFrame.cpp b/layout/generic/nsContainerFrame.cpp
index abf687c9b..da6e6cf79 100644
--- a/layout/generic/nsContainerFrame.cpp
+++ b/layout/generic/nsContainerFrame.cpp
@@ -1925,6 +1925,10 @@ nsContainerFrame::RenumberFrameAndDescendants(int32_t* aOrdinal,
             nsIFrame *f = bullet;
             do {
               nsIFrame *parent = f->GetParent();
+              if (!parent) {
+                // We may have an orphan situation in some corner cases.
+                break;
+              }
               parent->ChildIsDirty(f);
               f = parent;
             } while (f != listItem);