Crash [@ nsLineBreaker::FlushCurrentWord] with XBL

RESOLVED WORKSFORME

Status

()

Core
XBL
--
critical
RESOLVED WORKSFORME
11 years ago
2 years ago

People

(Reporter: Jesse Ruderman, Assigned: roc)

Tracking

(Blocks: 1 bug, {crash, testcase})

Trunk
x86
Mac OS X
crash, testcase
Points:
---
Bug Flags:
blocking1.9 ?
in-testsuite ?

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [sg:critical], crash signature)

Attachments

(2 attachments)

(Reporter)

Description

11 years ago
Created attachment 276344 [details]
testcase (may crash Firefox when loaded)

Loading the testcase crashes Firefox (Mac trunk debug) with a random address at the top of the stack and nsLineBreaker::FlushCurrentWord just below it.  The random address is often 0x00000000, but not always; I got a EXC_BAD_INSTRUCTION once.

It crashes most reliably if I run Firefox with a file: URL for the testcase on the command line.  If I load the testcase in an existing Firefox session, it doesn't always crash.
Flags: blocking1.9?
(Reporter)

Comment 1

11 years ago
Created attachment 276345 [details]
stack trace
(Reporter)

Updated

11 years ago
Whiteboard: [sg:critical]
Assignee: nobody → roc
I don't crash on trunk (built yesterday).
(Reporter)

Comment 3

11 years ago
WFM here too, even when loaded using a file: URL on the command line.
Status: NEW → RESOLVED
Last Resolved: 11 years ago
Resolution: --- → WORKSFORME
Crash Signature: [@ nsLineBreaker::FlushCurrentWord]

Updated

2 years ago
Group: core-security → core-security-release
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.