Closed Bug 635539 Opened 13 years ago Closed 13 years ago

crash [@ nsHTMLEditRules::DocumentModifiedWorker] using cross_fuzzv3

Categories

(Core :: DOM: Editor, defect)

Product:
Core
Component:
DOM: Editor
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 635636

People

(Reporter: eherokles, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: crash)

Crash Data

Attachments

(2 files)

Here is the WinDbg output
80.65 KB, text/plain
Details
The same: one "go" incremented
86.10 KB, text/plain
Details 
using cross_fuzzv3 on 
firefox4bpre12 nightly-build: 19.2.2011

BUCKET_ID:  APPLICATION_FAULT_NULL_POINTER_READ_PROBABLYEXPLOITABLE_xul!nsHTMLEditRules::DocumentModifiedWorker+32


Happends verry often.
Attachment #513791 - Attachment mime type: application/octet-stream → text/plain

    
  

        Attachment #513792 -
        Attachment mime type: application/octet-stream → text/plain

    
    

    
  
It was on windowsxp sp3
Severity: normal → critical

    
    

    
  
Please let us know the seed you used so we have some chance at reproducing
the crash.  Thanks.
Component: XUL → Editor
Keywords: crash
QA Contact: xptoolkit.widgets → editor

    
  
Depends on: 635636

    
    

    
  
Bug 635636 has a testcase that crashes with the same signature.
Blocks: crossfuzz

    
  
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → DUPLICATE
Crash Signature: [@ nsHTMLEditRules::DocumentModifiedWorker]

          You need to log in
          before you can comment on or make changes to this bug.
        






  

    
  







  

    

      
Attachment

      

      
      
      
      
    

    

      

        

          

            
General

            

              Creator: 



            

            
Created: 

            
Updated: 

            
Size: