Closed Bug 1407713 Opened 3 years ago Closed 3 years ago

Assertion failure: getExpandoChain(dst) == nullptr, at /builds/worker/workspace/build/src/js/xpconnect/wrappers/XrayWrapper.cpp:1247

Categories

(Core :: XPConnect, defect)

defect
Not set

Tracking

()

RESOLVED DUPLICATE of bug 1396466

People

(Reporter: jkratzer, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: assertion, testcase)

Attachments

(2 files)

Attached file trigger.html
Testcase found while fuzzing mozilla-central rev 20d9ad08dd36.
Flags: in-testsuite?
Attached file Minidump stack trace
INFO: Last good revision: 17920e3ba616e99089ec76e7c35c3dd31650caf3INFO: First bad revision: 072f8d4a9964129a06d774a5698f7f9f8128c66cINFO: Pushlog:
https://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=17920e3ba616e99089ec76e7c35c3dd31650caf3&tochange=072f8d4a9964129a06d774a5698f7f9f8128c66c

Conveniently, this was just fixed today by bug 1396466. Is this testcase worth landing too?
Blocks: 1355109
Depends on: 1396466
Flags: needinfo?(jorendorff)
Has Regression Range: --- → yes
This is fundamentally the same testcase as in bug 1396466, with a marquee being adopted from document A to document B and then back to document A.
Status: NEW → RESOLVED
Closed: 3 years ago
Flags: needinfo?(jorendorff)
Resolution: --- → DUPLICATE
Duplicate of bug: 1396466
You need to log in before you can comment on or make changes to this bug.