Closed
Bug 1322717
Opened 8 years ago
Closed 7 years ago
Crash in PLDHashTable::Search | mozilla::dom::DOMIntersectionObserver::UnlinkTarget
Categories
(Core :: DOM: Core & HTML, defect)
Tracking
()
RESOLVED
FIXED
mozilla53
| Tracking | Status | |
|---|---|---|
| firefox50 | --- | unaffected |
| firefox51 | --- | unaffected |
| firefox52 | --- | unaffected |
| firefox53 | --- | fixed |
People
(Reporter: RyanVM, Assigned: tschneider)
References
Details
(Keywords: crash)
Crash Data
Attachments
(1 file)
|
6.28 KB,
patch
|
Details | Diff | Splinter Review |
+++ This bug was initially created as a clone of Bug #1317415 +++ Spun off bug 1317415 for cleaner tracking of the new fix.
|
Reporter | |
Updated•8 years ago
|
Assignee: nobody → tschneider
Pushed by ryanvm@gmail.com: https://hg.mozilla.org/integration/mozilla-inbound/rev/cfc91cb39848 Disconnect/Unlink in the proper order to avoid crashes in mozilla::dom::DOMIntersectionObserver::UnlinkTarget. r=mrbkap
Keywords: checkin-needed
|
||
Updated•8 years ago
|
Keywords: csectype-uaf,
regression,
sec-critical,
topcrash
|
||
Comment 2•8 years ago
|
||
Thanks, RyanVM!
|
||
Comment 3•7 years ago
|
||
| bugherder | ||
https://hg.mozilla.org/mozilla-central/rev/cfc91cb39848
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla53
|
Assignee | |
Comment 4•7 years ago
|
||
Added the original patch to make clear what actually landed here.
|
||
Comment 5•7 years ago
|
||
I'm still getting this type of crash on Nightly and even on inbound. Running Windows 10 64 bit. Here's the crash report: https://crash-stats.mozilla.com/report/index/8f4cde8b-12e0-4a3a-9ad1-e82292170122
|
||
Comment 6•7 years ago
|
||
There's a new bug filed for that: bug 1332939.
|
||
Updated•5 years ago
|
Component: DOM → DOM: Core & HTML
You need to log in
before you can comment on or make changes to this bug.
Description
•