Closed Bug 1337712 Opened 8 years ago Closed 4 years ago

Crashes @ mozilla::dom::Element::UnbindFromTree

Categories

(Core :: DOM: Core & HTML, defect, P3)

52 Branch
defect

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: mishra.dhiraj95, Unassigned)

References

Details

(Keywords: crash, testcase)

Attachments

(1 file)

65.07 KB, application/x-zip-compressed
Details
Attached file REPO.ZIP
User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0 Build ID: 20170206101855 Steps to reproduce: I tested this on : FF Beta in Windows FF Stable in Windows FF Nightly in Windows XML,XUL parser memory corruption. Actual results: Steps to reproduce: 1. Open poc.html The tab gets crashes in Nightly, however in Beta version in my case whole browser gets closed, and a crash ID is generated. Crash ID: https://crash-stats.mozilla.com/report/index/7dad7386-96ee-45ce-8a09-dec972170208 Expected results: Attaching the testcases for reference
Likely a dup of bug 1322307
Keywords: crash, testcase
See Also: → 1322307
Group: firefox-core-security
Component: Untriaged → DOM
Product: Firefox → Core
Priority: -- → P3
Component: DOM → DOM: Core & HTML

(In reply to Tyson Smith [:tsmith] from comment #1)

Likely a dup of bug 1322307

Fixed in Firefox 73.

Matti, can you reproduce with the testcase?

Flags: needinfo?(bugzilla)

The testcase doesn't cause a crash but you get an "XML Parsing Error"

Status: UNCONFIRMED → RESOLVED
Closed: 4 years ago
Flags: needinfo?(bugzilla)
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: