1728625 - Crash in [@ mozilla::dom::HTMLSelectElement::QueryInterface]

Status: RESOLVED WORKSFORME

(Core :: DOM: HTML Parser, defect)

Description

[u608768]

Crash report: https://crash-stats.mozilla.org/report/index/6d9d1472-5d6f-4eb0-95d4-bf7240210829

Reason: SIGSEGV /SEGV_MAPERR

Top 10 frames of crashing thread:

0 libxul.so mozilla::dom::HTMLSelectElement::QueryInterface dom/html/HTMLSelectElement.cpp:154
1 libxul.so nsCOMPtr_base::assign_from_qi xpcom/base/nsCOMPtr.cpp:46
2 libxul.so mozilla::EventListenerManager::GetScriptGlobalAndDocument dom/events/EventListenerManager.cpp:1883
3 libxul.so mozilla::EventListenerManager::SetEventHandler dom/events/EventListenerManager.cpp:825
4 libxul.so mozilla::dom::Element::SetEventHandler dom/base/Element.cpp:2204
5 libxul.so nsGenericHTMLFormElement::AfterSetAttr dom/html/nsGenericHTMLElement.cpp:1896
6 libxul.so mozilla::dom::Element::SetAttrAndNotify dom/base/Element.cpp:2509
7 libxul.so mozilla::dom::Element::SetAttr dom/base/Element.cpp:2365
8 libxul.so nsHtml5TreeOperation::Perform parser/html/nsHtml5TreeOperation.cpp:1213
9 libxul.so nsHtml5TreeOpExecutor::RunFlushLoop parser/html/nsHtml5TreeOpExecutor.cpp:646

A number of these in the 20210828212352 build. All for a single installation though.

Comment 1

[Edgar Chen [:edgar]]

Move to Paser as the crash happens while performing parser operation.
Set severity to S3 because it happens only in the 20210828212352 build for a single installation.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.