Closed Bug 1298130 Opened 3 years ago Closed 3 years ago

Crash in nsINode::IsInComposedDoc

Categories

(Core :: DOM: Events, defect, critical)

51 Branch
x86
Windows 10
defect
Not set
critical

Tracking

()

RESOLVED FIXED
mozilla51
Tracking Status
firefox51 --- fixed

People

(Reporter: kats, Assigned: kats)

References

Details

(Keywords: crash, regression, Whiteboard: [nightly only])

Crash Data

Attachments

(1 file)

This bug was filed from the Socorro interface and is 
report bp-09f9ee54-2b92-4d81-9773-4ca832160824.
=============================================================

Reported by Michelle Funches (QA) as a crash she encountered while testing with touch events. The stack points to code added in bug 1162771.
Attached patch NullcheckSplinter Review
I guess the target can be null (or maybe is not a nsINode) in some cases?
Attachment #8786729 - Flags: review?(bugs)
Comment on attachment 8786729 [details] [diff] [review]
Nullcheck

non-nsINode sounds unlikely, but apparently somehow null.
Attachment #8786729 - Flags: review?(bugs) → review+
Pushed by kgupta@mozilla.com:
https://hg.mozilla.org/integration/mozilla-inbound/rev/5f2944711e5c
Fix a potential null pointer dereference. r=smaug
https://hg.mozilla.org/mozilla-central/rev/5f2944711e5c
Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla51
You need to log in before you can comment on or make changes to this bug.