crash in nsJSUtils::nsConvertObjectToJSVal (document.createElementWithNameSpace)

VERIFIED FIXED in M11

Status

()

Core
DOM
P1
critical
VERIFIED FIXED
19 years ago
18 years ago

People

(Reporter: shaver, Assigned: vidur (gone))

Tracking

({crash})

Trunk
x86
Linux
crash
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

Trying to generate a test case for 7997 (alecf's bug, not rods'), I find myself
crashing in

0x4046f88e in nsJSUtils::nsConvertObjectToJSVal (aSupports=0x40091f02,
    aContext=0x86a5250, aReturn=0xbfffe788)
    at ../../../../dom/src/base/nsJSUtils.cpp:133
133         if (NS_OK == aSupports->QueryInterface(kIScriptObjectOwnerIID,
(void**)&owner)) {

#1  0x4047dd41 in NSDocumentCreateElementWithNameSpace (cx=0x86a5a68,
    obj=0x8692d78, argc=2, argv=0x82eb3e8, rval=0xbfffe788)
    at ../../../../dom/src/coreDOM/nsJSDocument.cpp:769

I'll attach my test case to this bug.

(Sorry to add to your woes; I was trying to see if I could fix 7997 for joki.)
Created attachment 1592 [details]
test case (produces crash in apprunner)
More data: createElement doesn't crash this way.  Also, viewer sees the same
crash pattern, which may make it more pleasant to debug.
``Don't do that, then'' was the resolution, though we should make it not crash.
Crashes are all M11/P1/critical.
(Assignee)

Updated

19 years ago
Status: NEW → RESOLVED
Last Resolved: 19 years ago
Resolution: --- → FIXED
(Assignee)

Comment 5

19 years ago
document.createElementWithNameSpace() was only implemented for XML documents.
Invoking it now throws a "method not implemented" exception.

Comment 6

18 years ago
Adding crash keyword
Keywords: crash

Comment 7

18 years ago
Verified with 2000-12-15.
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.