1353 - Crash in JS_GetPrivate()

Status: VERIFIED DUPLICATE of bug 1223

(Core :: DOM: Core & HTML, defect, P1)

Description

[troy]

Here's the Purify output. It's P1/critical because it's a crash...

NTDLL! 77f76148()
JS_GetPrivate(JSContext * 0x00f45480, JSObject * 0x010c4c68) line 1080 + 142
bytes
GetHTMLDocumentProperty(JSContext * 0x00f45480, JSObject * 0x010c4c68, long -11,
long * 0x0012f2a8) line 90 + 14 bytes
js_Interpret(JSContext * 0x00f45480, long * 0x0012f428) line 2229 + 37 bytes
js_Invoke(JSContext * 0x00f45480, unsigned int 0, int 0) line 666 + 13 bytes
js_Interpret(JSContext * 0x00f45480, long * 0x0012fbbc) line 2183 + 15 bytes
js_Invoke(JSContext * 0x00f45480, unsigned int 1, int 0) line 666 + 13 bytes
js_CallFunctionValue(JSContext * 0x00f45480, JSObject * 0x010c3200, long
17581304, unsigned int 1, long * 0x0012fcd8, long * 0x0012fce0) line 735 + 15
bytes
JS_CallFunctionValue(JSContext * 0x00f45480, JSObject * 0x010c3200, long
17581304, unsigned int 1, long * 0x0012fcd8, long * 0x0012fce0) line 2370 + 29
bytes
nsJSEventListener::ProcessEvent(nsIDOMEvent * 0x01412110) line 97 + 34 bytes
nsEventListenerManager::HandleEvent(nsIPresContext & {...}, nsEvent *
0x0012fe10, nsIDOMEvent * * 0x0012fd90, nsEventStatus & nsEventStatus_eIgnore)
line 495 + 17 bytes
GlobalWindowImpl::HandleDOMEvent(GlobalWindowImpl * const 0x00efb6c4,
nsIPresContext & {...}, nsEvent * 0x0012fe10, nsIDOMEvent * * 0x0012fd90,
unsigned int 1, nsEventStatus & nsEventStatus_eIgnore) line 1724
nsWebShell::OnConnectionsComplete(nsWebShell * const 0x00ee3620) line 1744 + 34
bytes
nsDocLoaderImpl::LoadURLComplete(nsIURL * 0x00f4cb70, nsISupports * 0x00f4c900,
int 0) line 948
nsDocumentBindInfo::OnStopBinding(nsDocumentBindInfo * const 0x00f4c900, nsIURL
* 0x00f4cb70, int 0, const nsString & {""}) line 1394
OnStopBindingProxyEvent::HandleEvent(OnStopBindingProxyEvent * const 0x01416a60)
line 570
StreamListenerProxyEvent::HandlePLEvent(PLEvent * 0x01416a64) line 452 + 12
bytes
PL_HandleEvent(PLEvent * 0x01416a64) line 395 + 10 bytes
PL_ProcessPendingEvents(PLEventQueue * 0x00e98530) line 357 + 9 bytes
_md_EventReceiverProc(HWND__ * 0x00140714, unsigned int 49296, unsigned int 0,
long 15303984) line 675 + 9 bytes
USER32! 77e71250()
00e98530()

Comment 1

[vidur (gone)]

Dup of bug# 1223. The page uses the JavaScript "with" construct that is
currently busted in the JS engine.

*** This bug has been marked as a duplicate of 1223 ***

Comment 2

[leger]

Marking Verified as a dup.