Closed
Bug 664957
Opened 13 years ago
Closed 13 years ago
Crash [@ JSObject::isWrapper] with InstallTrigger, Iterator, E4X
Categories
(Core :: XPConnect, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 660517
People
(Reporter: jruderman, Assigned: mrbkap)
Details
(Keywords: crash, testcase, Whiteboard: [sg:dupe 660517])
Attachments
(2 files)
This is a null deref, but anything involving InstallTrigger (chrome-content interaction) and wrappers is scary.
|
Reporter | |
Comment 1•13 years ago
|
||
|
||
Comment 2•13 years ago
|
||
moz_bug_r_a4 has had success messing with InstallTrigger, cc'ing him here.
|
||
Comment 3•13 years ago
|
||
Blake, this in and of itself doesn't look exploitable. Or do you see something here that looks scary?
Assignee: nobody → mrbkap
|
Assignee | |
Updated•13 years ago
|
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → DUPLICATE
|
|
||
Updated•13 years ago
|
Whiteboard: [sg:dupe 660517]
Group: core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•