Evil testcase using drop down list crashes Mozilla [@ nsCachedStyleData::GetStyleData]

VERIFIED FIXED

Status

()

defect
--
critical
VERIFIED FIXED
14 years ago
8 years ago

People

(Reporter: martijn.martijn, Unassigned)

Tracking

({crash, regression, testcase})

Trunk
x86
Windows XP
Points:
---
Dependency tree / graph
Bug Flags:
blocking1.9a1 +

Firefox Tracking Flags

(Not tracked)

Details

(crash signature)

Attachments

(2 attachments)

Reporter

Description

14 years ago
See upcoming testcase.
Hovering over the drop down list should not crash Mozilla, but it crashes for me
in 2005-09-28 trunk build.
Talkback ID: TB9876033K

Surprisingly, it doesn't crash Mozilla1.7. I'll look for the regression range.
Reporter

Comment 1

14 years ago
Posted file testcase
Either that or maybe bug 307277...

Mats, could you check this out?
Blocks: 307277
Flags: blocking1.9a1+

Comment 4

14 years ago
This might be a dup of bug 310426.
Reporter

Updated

14 years ago
Depends on: 315752

Comment 5

14 years ago
Backing out the patch for bug 117984 does fix the testcase here. Backing out bug 307277 does not fix this.

Comment 6

14 years ago

Updated

14 years ago
Summary: Evil testcase using drop down list crashes Mozilla → Evil testcase using drop down list crashes Mozilla [@ nsCachedStyleData::GetStyleData]

Comment 7

14 years ago
Fixed by the patch for bug 315752.
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
Reporter

Comment 8

14 years ago
Verified fixed, using:
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20051220 Firefox/1.6a1
Status: RESOLVED → VERIFIED
Crash Signature: [@ nsCachedStyleData::GetStyleData]
You need to log in before you can comment on or make changes to this bug.