Closed
Bug 346281
Opened 18 years ago
Closed 18 years ago
Crash [@ nsBoxObject::RemoveProperty] passing undefined
Categories
(Core :: DOM: Core & HTML, defect)
Tracking
()
VERIFIED
FIXED
People
(Reporter: jruderman, Assigned: smaug)
Details
(Keywords: crash, testcase)
Crash Data
Attachments
(2 files)
|
176 bytes,
text/html
|
Details | |
|
2.86 KB,
patch
|
bzbarsky
:
review+
bzbarsky
:
superreview+
|
Details | Diff | Splinter Review |
Similar to bug 346083, but for RemoveProperty.
|
Reporter | |
Comment 1•18 years ago
|
||
|
Assignee | |
Comment 2•18 years ago
|
||
Fixes also few other possible problems in the same file; makes sure that return value is set nsnull in few cases.
Assignee: general → Olli.Pettay
Status: NEW → ASSIGNED
Attachment #231094 -
Flags: superreview?(bzbarsky)
Attachment #231094 -
Flags: review?(bzbarsky)
|
||
Updated•18 years ago
|
Attachment #231094 -
Flags: superreview?(bzbarsky)
Attachment #231094 -
Flags: superreview+
Attachment #231094 -
Flags: review?(bzbarsky)
Attachment #231094 -
Flags: review+
|
|
Assignee | |
Updated•18 years ago
|
Status: ASSIGNED → RESOLVED
Closed: 18 years ago
Resolution: --- → FIXED
|
||
Comment 3•18 years ago
|
||
Verified FIXED using the testcase of https://bugzilla.mozilla.org/attachment.cgi?id=231092&action=view with build 2006-07-30-08 of SeaMonkey trunk in Windows XP.
Status: RESOLVED → VERIFIED
|
||
Updated•13 years ago
|
Crash Signature: [@ nsBoxObject::RemoveProperty]
|
|
||
Updated•11 years ago
|
Component: DOM: Mozilla Extensions → DOM
|
|
||
Updated•5 years ago
|
Component: DOM → DOM: Core & HTML
You need to log in
before you can comment on or make changes to this bug.
Description
•