Closed
Bug 1337712
Opened 8 years ago
Closed 4 years ago
Crashes @ mozilla::dom::Element::UnbindFromTree
Categories
(Core :: DOM: Core & HTML, defect, P3)
Tracking
()
RESOLVED
WORKSFORME
People
(Reporter: mishra.dhiraj95, Unassigned)
References
Details
(Keywords: crash, testcase)
Attachments
(1 file)
65.07 KB,
application/x-zip-compressed
|
Details |
User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0
Build ID: 20170206101855
Steps to reproduce:
I tested this on :
FF Beta in Windows
FF Stable in Windows
FF Nightly in Windows
XML,XUL parser memory corruption.
Actual results:
Steps to reproduce:
1. Open poc.html
The tab gets crashes in Nightly, however in Beta version in my case whole browser gets closed, and a crash ID is generated.
Crash ID:
https://crash-stats.mozilla.com/report/index/7dad7386-96ee-45ce-8a09-dec972170208
Expected results:
Attaching the testcases for reference
Comment 1•8 years ago
|
||
Likely a dup of bug 1322307
Updated•8 years ago
|
Group: firefox-core-security
Component: Untriaged → DOM
Product: Firefox → Core
Updated•8 years ago
|
Priority: -- → P3
Assignee | ||
Updated•6 years ago
|
Component: DOM → DOM: Core & HTML
Comment 2•4 years ago
|
||
(In reply to Tyson Smith [:tsmith] from comment #1)
Likely a dup of bug 1322307
Fixed in Firefox 73.
Matti, can you reproduce with the testcase?
Flags: needinfo?(bugzilla)
Comment 3•4 years ago
|
||
The testcase doesn't cause a crash but you get an "XML Parsing Error"
Status: UNCONFIRMED → RESOLVED
Closed: 4 years ago
Flags: needinfo?(bugzilla)
Resolution: --- → WORKSFORME
You need to log in
before you can comment on or make changes to this bug.
Description
•