Closed
Bug 1333580
Opened 7 years ago
Closed 7 years ago
Fix case of dangling pointer during FragmentOrElement unlinking
Categories
(Core :: DOM: Core & HTML, defect)
Tracking
()
RESOLVED
FIXED
mozilla54
| Tracking | Status | |
|---|---|---|
| firefox54 | --- | fixed |
People
(Reporter: tschneider, Assigned: tschneider)
References
Details
Attachments
(1 file)
Improperly unregistering intersection observers in DOMIntersectionObserver::unobserved causes a crash in mozilla::dom::DOMIntersectionObserver::UnlinkTarget due to usage of a dangling pointer.
| Comment hidden (mozreview-request) |
|
||
Updated•7 years ago
|
Assignee: nobody → tschneider
|
||
Comment 2•7 years ago
|
||
| mozreview-review | ||
Comment on attachment 8830067 [details] Bug 1333580 - Properly unregister last unobserved target. https://reviewboard.mozilla.org/r/106984/#review108044
Attachment #8830067 -
Flags: review?(mrbkap) → review+
|
Assignee | |
Updated•7 years ago
|
Keywords: checkin-needed
Pushed by ryanvm@gmail.com: https://hg.mozilla.org/integration/autoland/rev/3a822b9c8543 Properly unregister last unobserved target. r=mrbkap
Keywords: checkin-needed
|
||
Comment 4•7 years ago
|
||
| bugherder | ||
https://hg.mozilla.org/mozilla-central/rev/3a822b9c8543
Status: NEW → RESOLVED
Closed: 7 years ago
status-firefox54:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla54
|
||
Updated•5 years ago
|
Component: DOM → DOM: Core & HTML
You need to log in
before you can comment on or make changes to this bug.
Description
•