294764 - property operations on window.sidebar causes crash

Status: RESOLVED DUPLICATE of bug 244933

(Firefox :: General, defect)

Description

[shutdown]

User-Agent:       Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Build Identifier: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4

Trying to add a property to the window.sidebar (throws an exception)
seems to corrupt the internal state of the sidebar object. Enumerating
properties of the corrupted sidebar object crashes the browser.

Reproducible: Always

Steps to Reproduce:
1. navigate the browser to
javascript: try{sidebar.x=0;}catch(e){} for(i in sidebar);
Actual Results:  
the browser crashes.

Expected Results:  
nothing should happen.

Comment 1

[Kevin Brosnan]

WFM - Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b2) Gecko/20050516
Firefox/1.0+ 

It does crash 1.0.4

Comment 2

[Daniel Veditz [:dveditz]]

1.0-branch crash confirmed

Comment 3

[shutdown]

obligatory update. the bug is still present in:
Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7.9) Gecko/20050709 Firefox/1.0.5

Comment 4

[William Bumgarner [:zsinj]]

Are you able to provide a Talkback ID?

This could be a dupe of bug 244933.

Comment 5

[shutdown]

(In reply to comment #4)
> Are you able to provide a Talkback ID?
> This could be a dupe of bug 244933.

http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=2&type=iid&id=7676352
Hmm... I think that you're right.

Comment 6

[David Bradley]

Yeah, looks to be a dupe and I don't see it crashing any more.