Crash in nsINode::IsInComposedDoc

RESOLVED FIXED in Firefox 51

Status

()

Core
DOM: Events
--
critical
RESOLVED FIXED
a year ago
a year ago

People

(Reporter: kats, Assigned: kats)

Tracking

({crash, regression})

51 Branch
mozilla51
x86
Windows 10
crash, regression
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(firefox51 fixed)

Details

(Whiteboard: [nightly only], crash signature)

Attachments

(1 attachment)

This bug was filed from the Socorro interface and is 
report bp-09f9ee54-2b92-4d81-9773-4ca832160824.
=============================================================

Reported by Michelle Funches (QA) as a crash she encountered while testing with touch events. The stack points to code added in bug 1162771.
Blocks: 1244402
Created attachment 8786729 [details] [diff] [review]
Nullcheck

I guess the target can be null (or maybe is not a nsINode) in some cases?
Attachment #8786729 - Flags: review?(bugs)
Comment on attachment 8786729 [details] [diff] [review]
Nullcheck

non-nsINode sounds unlikely, but apparently somehow null.
Attachment #8786729 - Flags: review?(bugs) → review+

Comment 3

a year ago
Pushed by kgupta@mozilla.com:
https://hg.mozilla.org/integration/mozilla-inbound/rev/5f2944711e5c
Fix a potential null pointer dereference. r=smaug
https://hg.mozilla.org/mozilla-central/rev/5f2944711e5c
Status: NEW → RESOLVED
Last Resolved: a year ago
status-firefox51: affected → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla51
You need to log in before you can comment on or make changes to this bug.