267273 - crash calling nsXFormsInputElement::WillSetAttribute

Status: RESOLVED WORKSFORME

(Core Graveyard :: XForms, defect)

Description

[Darin Fisher]

crash calling nsXFormsInputElement::WillSetAttribute

this crash may be a XTF bug, i'm not sure.  i can reproduce it pretty easily
with xforms, but from the look of the stack it looks like xforms may just be the
victim.  nonetheless, since i can repro it with xforms, i'm filing it against
xforms.

valgrind trace and xforms testcase coming up...

Comment 1

[Darin Fisher]

Attachment: valgrind log

the action is at the bottom of the valgrind log.  looks like the HTML document
is getting deleted when JS_GC runs, and just after that we get a call to
nsXFormsInputElement::WillSetAttribute.  inside GetModelAndBind we try to use
the document, and so we crash.

Comment 2

[Darin Fisher]

Attachment: xforms testcase

note: this xhtml document probably isn't very interesting without the code in
my tree that implements the <submit> element.  i've attached it here just in
case it contains something useful ;-)

Comment 3

[Darin Fisher]

hey alex, bryner thought you might be interested in this.  looks like the
document is getting released prematurely.  any thoughts?

Comment 4

[Allan Beaufour]

This has been here for some time.... I've never been able to reproduce this.
Anyone can?

Comment 5

[Olli Pettay [:smaug][[e-mail]]]

I think we can close this. xf:input has anyway a new XBL-based implementation now.

Comment 6

[Doron Rosenberg (IBM)]

Can't reproduce

Comment 7

[aaronr]

I haven't seen this problem in ages.  I think that we can close it if no one
objects in the next day or two.

Comment 8

[Allan Beaufour]

(In reply to comment #7)
> I haven't seen this problem in ages.  I think that we can close it if no one
> objects in the next day or two.

No one did.