Closed Bug 1312937 Opened 8 years ago Closed 8 years ago

Crash in InvalidArrayIndex_CRASH | mozilla::InactiveRefreshDriverTimer::TickOne

Categories

(Core :: Layout, defect)

defect
Not set
critical

Tracking

()

RESOLVED FIXED
mozilla52
Tracking Status
firefox52 --- fixed

People

(Reporter: mstange, Unassigned)

References

Details

(Keywords: crash, regression)

Crash Data

This is a regression from bug 1198381.
Blocks: 1198381
Flags: needinfo?(afarre)
My guess is that you need to copy mNextDriverIndex into a local variable because it will change during the call to TickDriver.
Ah, bug 1198381 has already been backed out, so this will be fixed in the next nightly.
Status: NEW → RESOLVED
Closed: 8 years ago
Flags: needinfo?(afarre)
Resolution: --- → FIXED
Target Milestone: --- → mozilla52
Good that we found it though, I'll make sure to include a fix for it.
Crash Signature: [@ InvalidArrayIndex_CRASH | mozilla::InactiveRefreshDriverTimer::TickOne] → [@ InvalidArrayIndex_CRASH | mozilla::InactiveRefreshDriverTimer::TickOne] [@ InvalidArrayIndex_CRASH | nsTArray_Impl<T>::ElementAt | mozilla::InactiveRefreshDriverTimer::TickOne]
this was backed out so no longer affects 52
You need to log in before you can comment on or make changes to this bug.