Closed Bug 1423057 Opened 7 years ago Closed 6 years ago

Assertion failure: !mTable (Tear-off objects remain in hashtable at shutdown.), at /builds/worker/workspace/build/src/dom/svg/nsSVGAttrTearoffTable.h:29

Categories

(Core :: SVG, defect, P3)

59 Branch
defect

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: jkratzer, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: assertion, testcase)

Attachments

(1 file)

Attached file trigger.html
Testcase found while fuzzing mozilla-central rev 709f355a7a8c. OS|Linux|0.0.0 Linux 4.4.0-101-generic #124-Ubuntu SMP Fri Nov 10 18:29:59 UTC 2017 x86_64 CPU|amd64|family 6 model 69 stepping 1|1 GPU||| Crash|SIGSEGV|0x0|0 0|0|libxul.so|nsSVGAttrTearoffTable<nsSVGEnum, nsSVGEnum::DOMAnimatedEnum>::~nsSVGAttrTearoffTable|hg:hg.mozilla.org/mozilla-central:dom/svg/nsSVGAttrTearoffTable.h:709f355a7a8c|29|0x5 0|1|libc-2.23.so||||0x39ff8 0|2|firefox|__libc_csu_fini|||0x10 0|3|firefox||||0x66d8 0|4|libc-2.23.so||||0x3a045 0|5|firefox|__libc_csu_fini|||0x10 0|6|libc-2.23.so||||0x20837 0|7|firefox|MOZ_ReportAssertionFailure|hg:hg.mozilla.org/mozilla-central:mfbt/Assertions.h:709f355a7a8c|165|0x5
Flags: in-testsuite?
Version: unspecified → 59 Branch
Priority: -- → P1
Priority: P1 → P3
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → WORKSFORME

I can no longer reproduce the assertion failure, mark as WFM.

You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: