Closed Bug 20986 Opened 25 years ago Closed 25 years ago

crash destroying event listener for anonymous content frame

Categories

(Core :: DOM: UI Events & Focus Handling, defect, P1)

Product:
Core
Component:
DOM: UI Events & Focus Handling
Platform:
x86
Windows NT
Type:
defect

Tracking

()

Status:
VERIFIED WORKSFORME

People

(Reporter: waterson, Assigned: waterson)

Details

Attachments

(1 file)

stack trace
7.96 KB, text/plain
Details 
To get here, I did something like:

1. Bring up mozilla.
2. Switch to bookmarks panel in sidebar
3. Open tons of folders and scroll around a bit
4. Leave mozilla running for an hour or two
5. Try to switch back to related links panel

I get a crash nuking the event listener manager; looks like ls->mListener is
double-freed at:

http://lxr.mozilla.org/mozilla/source/layout/events/src/nsEventListenerManager.
cpp#166

Will attach stack trace.
Attached file stack trace — 

    
  
Severity: normal → critical
Status: NEW → ASSIGNED
Target Milestone: M13

    
  
Priority: P3 → P1

    
  
Status: ASSIGNED → RESOLVED
Closed: 25 years ago
Resolution: --- → WORKSFORME

    
    

    
  
I can't reproduce this now. I'm going to mark as WORKSFORME, and presume that
hyatt & saari's recent key hackery has fixed it.

    
  
Status: RESOLVED → VERIFIED

    
    

    
  
works for me too...
Component: Event Handling → User events and focus handling

          You need to log in
          before you can comment on or make changes to this bug.
        






  

    
  







  

    

      
Attachment

      

      
      
      
      
    

    

      

        

          

            
General

            

              Creator: 



            

            
Created: 

            
Updated: 

            
Size: