Closed Bug 349201 Opened 13 years ago Closed 13 years ago
Crash [@ XULPopup
Listener Impl::Close Popup]
nsXULPopupListener keeps a weak reference to the popup. Bad things happen if popup is deleted before the listener. Testcase and patch coming.
Right click to see context menu. Wait until it disappears. You may have to reload/retry few times. Tested 1.8.1 and trunk and crashes in both cases.
Don't use raw pointer but boxobject, since box object won't do anything after the element it points to is deleted or removed from document.
Also 1.8.0 crashes.
Oops, the changes to nsXULDocument.cpp aren't related to this bug.
Comment on attachment 234455 [details] [diff] [review] proposed patch Makes sense.
Attachment #234455 - Flags: superreview?(bzbarsky) → superreview+
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
Flags: blocking1.8.1? → blocking1.8.1+
Target Milestone: --- → mozilla1.8.1
What is the 181 approval pending on? coordination with 220.127.116.11?
Whiteboard: [181approval pending] → [sg:critical] uses freed mem [181approval pending]
Comment on attachment 234455 [details] [diff] [review] proposed patch a=schrep for drivers - approving all [181approval pending] bugs now that tree is open.
Attachment #234455 - Flags: approval1.8.1? → approval1.8.1+
Flags: blocking18.104.22.168? → blocking22.214.171.124+
Whiteboard: [sg:critical] uses freed mem [181approval pending] → [sg:critical] uses freed mem
Comment on attachment 234455 [details] [diff] [review] proposed patch approved for 1.8.0 branch, a=dveditz for drivers
Attachment #234455 - Flags: approval126.96.36.199? → approval188.8.131.52+
https://bugzilla.mozilla.org/attachment.cgi?id=234448&action=view shouldn't cause a crash when following directions in comment #1. Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1b2) Gecko/20060825 BonEcho/2.0b2 verified 1.8.1b2 Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:184.108.40.206pre) Gecko/20060825 Firefox/220.127.116.11pre verified 18.104.22.168
Component: XP Toolkit/Widgets: XUL → XUL
QA Contact: xptoolkit.xul → xptoolkit.widgets
Crash Signature: [@ XULPopupListenerImpl::ClosePopup]
You need to log in before you can comment on or make changes to this bug.