Closed Bug 1711046 Opened 5 months ago Closed 4 months ago

Crash in [@ nsDragService::GetNumDropItems]

Categories

(Core :: Widget: Gtk, defect)

defect

Tracking

()

RESOLVED FIXED
90 Branch
Tracking Status
firefox-esr78 --- wontfix
firefox88 --- wontfix
firefox89 --- wontfix
firefox90 --- fixed

People

(Reporter: sefeng, Assigned: stransky)

Details

(Keywords: crash)

Crash Data

Attachments

(1 file)

Crash report: https://crash-stats.mozilla.org/report/index/4378541a-6e2e-4069-a245-fa0490210505

Reason: SIGSEGV /SEGV_MAPERR

Top 10 frames of crashing thread:

0 libxul.so nsDragService::GetNumDropItems widget/gtk/nsDragService.cpp:579
1 libxul.so {virtual override thunk} 
2 libxul.so mozilla::dom::DataTransfer::CacheExternalDragFormats dom/events/DataTransfer.cpp:1356
3 libxul.so nsContentUtils::SetDataTransferInEvent dom/base/nsContentUtils.cpp:5685
4 libxul.so mozilla::dom::DragEvent::GetDataTransfer dom/events/DragEvent.cpp:64
5 libxul.so mozilla::dom::DragEvent_Binding::get_dataTransfer dom/bindings/DragEventBinding.cpp:157
6 libxul.so bool mozilla::dom::binding_detail::GenericGetter<mozilla::dom::binding_detail::NormalThisPolicy, mozilla::dom::binding_detail::ThrowExceptions> dom/bindings/BindingUtils.cpp:3114
7 libxul.so js::InternalCallOrConstruct js/src/vm/Interpreter.cpp:522
8 libxul.so js::NativeGetProperty js/src/vm/NativeObject.cpp:2339
9 libxul.so Interpret js/src/vm/Interpreter.cpp:2939

Looks like a null pointer crash.

Assignee: nobody → stransky
Status: NEW → ASSIGNED
Pushed by stransky@redhat.com:
https://hg.mozilla.org/integration/autoland/rev/3425889619c3
[Linux] Check mSourceDataItems before use, r=jhorak
Status: ASSIGNED → RESOLVED
Closed: 4 months ago
Resolution: --- → FIXED
Target Milestone: --- → 90 Branch
You need to log in before you can comment on or make changes to this bug.