Closed Bug 380482 Opened 17 years ago Closed 17 years ago
Crash [@ ns
Doc Accessible::Flush Events Callback] with quote and removing stuff
See testcase, which crashes current trunk builds within 500ms. The testcase uses enhanced privileges, so you need to download it to your desktop. Doesn't crash in a 2007-05-09 build, does crash in a 2007-05-10 build, probably a regression from bug 377728. Talkback ID: TB32058571M nsCOMPtr_base::~nsCOMPtr_base [mozilla/xpcom/build/nscomptr.cpp, line 81] nsDocAccessible::FlushEventsCallback [mozilla/accessible/src/base/nsdocaccessible.cpp, line 1300] NS_ProcessNextEvent_P [mozilla/xpcom/build/nsthreadutils.cpp, line 227] nsBaseAppShell::Run [mozilla/widget/src/xpwidgets/nsbaseappshell.cpp, line 154] MSVCR80.dll + 0x8ac9 (0x78138ac9) Marking security sensitive, because the code in the testcase should perhaps stay secret.
Assignee: aaronleventhal → surkov.alexander
I tried today's trunk where patch from bug 380412 is applied. I couldn't see a crash. I rolled back that patch and I get a crash. Martijn, can you confirm this bug is fixed?
Yeah, fixed indeed by the patch from bug 380412.
Status: NEW → RESOLVED
Closed: 17 years ago
Depends on: 380412
Resolution: --- → FIXED
What is secret about the testcase code? It's just walking the accessible tree, which is inaccessible from web content unless you've already granted it "hack me" level privileges.
I have no problem with opening it up. It's Mats' script. Maybe he has a different opinion.
I don't see a problem with opening it either, so doing that...
CC list accessible: false
Not accessible to reporter
Crash Signature: [@ nsDocAccessible::FlushEventsCallback]
You need to log in before you can comment on or make changes to this bug.