Closed Bug 851851 Opened 11 years ago Closed 11 years ago

"Assertion failure: win" in nsWindowSH::GlobalScopePolluterNewResolve

Categories

(Core :: DOM: Core & HTML, defect)

x86_64
macOS
defect
Not set
critical

Tracking

()

RESOLVED FIXED
Tracking Status
firefox21 --- unaffected
firefox22 + fixed

People

(Reporter: jruderman, Unassigned)

References

Details

(4 keywords)

Crash Data

Attachments

(2 files)

Attached file testcase
Assertion failure: win, at /Users/jruderman/trees/mozilla-central/dom/base/nsDOMClassInfo.cpp:3705

I'm guessing it would crash on the next line in a non-debug build.
[@ nsWindowSH::GlobalScopePolluterNewResolve]

This is a regression from today's merge from inbound.  I'm guessing bug 850517.
http://hg.mozilla.org/mozilla-central/pushloghtml?changeset=0b052daa913c
Attached file stack
This is the #1 topcrasher on nightly, and the fix is trivial, so I'm checking it in directly to m-c.

I massaged the testcase here for a while, but couldn't get it to work as a crashtest. Cutting my losses for now and pushing:

https://hg.mozilla.org/mozilla-central/rev/b03bb3ce8cee
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
This is another reason getting the window from the document is wrong, imo...
Crash Signature: [@ nsWindowSH::GlobalScopePolluterNewResolve(JSContext*, JS::Handle<JSObject*>, JS::Handle<int>, unsigned int, JS::MutableHandle<JSObject*>)]
Component: DOM → DOM: Core & HTML
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: