This is branch-only, right? This seems to work fine on trunk. And if so, this is basically bug 267833, no?
Branch-only. If there is no security risk, then WONTFIX..
Sure there's risk. That's why we want to land bug 267833 on branch. ;)
Depends on: 267833
in 220.127.116.11pre I crash at nsCachedStyleData::GetStyleData() Line 210, 'this' is a deleted object.
Whiteboard: [sg:critical?] fixed in 1.9 by 267833
verified fixed 18.104.22.168 using Mozilla/5.0 (Macintosh; U; Intel Mac OS X; ja-JP-mac; rv:22.214.171.124) Gecko/2007100816 Firefox/126.96.36.199 - no crash on testcase - adding verified keyword
Can someone change the status then to VERIFIED? This is in the list of bugs fixed for MFSA 2007-29 but stands out cos of it's 'NEW' status.
Status: NEW → RESOLVED
Last Resolved: 12 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.