Coverity thinks NULL frame will be passed to a function that dereferences it [@ nsBidiPresUtils::Resolve]

RESOLVED INVALID

Status

()

--
critical
RESOLVED INVALID
12 years ago
2 months ago

People

(Reporter: timeless, Unassigned)

Tracking

(Blocks: 1 bug, {coverity, crash})

Trunk
x86
Linux
coverity, crash
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(crash signature, URL)

(Reporter)

Description

12 years ago
CID: 968

not sure how valid this is, the flow control it offers doesn't seem impossible to me. if you can prove this isn't possible, there are annotations that can be added to tell coverity that this can't happen.

Comment 1

12 years ago
i have NOT the administrator for over 3 years. this person is of reptile version. i need to get a life and a computer to finish my edu. can u help. this is the first time i've gotten through and it says i'm on a macintosh. help.thx, jbt23@nau.edu
(Reporter)

Updated

10 years ago
Component: Layout: BiDi Hebrew & Arabic → Layout: Text
QA Contact: layout.bidi → layout.fonts-and-text
(Reporter)

Comment 2

9 years ago
i think coverity is wrong, sorry. frame can either never change from null and skip out of the loop early, or become null if it's destroyed and then do the same.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 9 years ago
Resolution: --- → INVALID
(Assignee)

Updated

7 years ago
Crash Signature: [@ nsBidiPresUtils::Resolve]
Blocks: 1230156
You need to log in before you can comment on or make changes to this bug.