Closed Bug 310505 Opened 19 years ago Closed 19 years ago

Evil testcase using drop down list crashes Mozilla [@ nsCachedStyleData::GetStyleData]

Categories

(Core :: Layout, defect)

Product:
Core
Component:
Layout
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
VERIFIED FIXED

People

(Reporter: martijn.martijn, Unassigned)

References

Details

(Keywords: crash, regression, testcase)

Crash Data

Attachments

(2 files)

testcase
316 bytes, text/html
Details
stacktrace from testcase
5.21 KB, text/plain
Details 
See upcoming testcase.
Hovering over the drop down list should not crash Mozilla, but it crashes for me
in 2005-09-28 trunk build.
Talkback ID: TB9876033K

Surprisingly, it doesn't crash Mozilla1.7. I'll look for the regression range.
Attached file testcase — 

  

  



    
    

    
  
Actually, this is a recent regression.
Testcase doesn't crash with 2005-09-20 build, but crashes with 2005-09-21 build:
http://bonsai.mozilla.org/cvsquery.cgi?treeid=default&module=all&branch=HEAD&branchtype=match&dir=&file=&filetype=match&who=&whotype=match&sortby=Date&hours=2&date=explicit&mindate=2005-09-20+06%3A00%3A00&maxdate=2005-09-21+08%3A00%3A00&cvsroot=%2Fcvsroot
Most likely a fall-out from bug 117984

  

  


Blocks: 117984

    
    

    
  
Either that or maybe bug 307277...

Mats, could you check this out?

  

  


Blocks: 307277
Flags: blocking1.9a1+

    
    

    
  
This might be a dup of bug 310426.

  

  


Depends on: 310426

    
  
Depends on: 315752

    
    

    
  
Backing out the patch for bug 117984 does fix the testcase here. Backing out bug 307277 does not fix this.

  

  



    
    

    
  


  

  

  



    
  
Summary: Evil testcase using drop down list crashes Mozilla → Evil testcase using drop down list crashes Mozilla [@ nsCachedStyleData::GetStyleData]

    
    

    
  
Fixed by the patch for bug 315752.

  

  


Status: NEW → RESOLVED
Closed: 19 years ago
Resolution: --- → FIXED

    
    

    
  
Verified fixed, using:
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20051220 Firefox/1.6a1

  

  


Status: RESOLVED → VERIFIED
Crash Signature: [@ nsCachedStyleData::GetStyleData]

          You need to log in
          before you can comment on or make changes to this bug.
        






  

    
  







  

    

      
Attachment

      

      
      
      
      
    

    

      

        

          

            
General

            

              Creator: 



            

            
Created: 

            
Updated: 

            
Size: