352134 - [@ XPCNativeWrapper::GetNewOrUsed - MirrorWrappedNativeParent]

Status: RESOLVED DUPLICATE of bug 455633

(Core :: XPConnect, defect)

Description

[timeless]

i really can't figure out whether this is possible, it might not be

https://opensource.klocwork.com/idm/problem.html?project=firefox&pid=76369
http://bonsai.mozilla.org/cvsblame.cgi?file=/mozilla/js/src/xpconnect/src/XPCNativeWrapper.cpp&rev=1.44&mark=1017,1020,1022,1024,1392#1013
http://bonsai.mozilla.org/cvsblame.cgi?file=/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp&rev=1.120&nark=1164,1203,1243,1273#1160

Afaict coverity did not complain about this.

Comment 1

[Boris Zbarsky [:bzbarsky]]

This isn't possible.  The JS_GetParent of a XPCWrappedNative's flat JS object will always have an XPCWrappedNative associated with it.  I'd be happy to add an assert to this code if that will make klocwork happy.

Comment 2

[Daniel C]

This (I think) is #16 topcrasher for Minefield. I just crashed like this: TB29156689G

Build identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a3pre) Gecko/2007020804 Minefield/3.0a3pre