Closed Bug 401169 Opened 12 years ago Closed 12 years ago

Crash [@ RtlAllocateHeap] when javascript turned off and noscript, table, script, title

Categories

(Core :: HTML: Parser, defect, P3, critical)

x86
Windows XP
defect

Tracking

()

VERIFIED FIXED

People

(Reporter: martijn.martijn, Assigned: mrbkap)

References

Details

(Keywords: crash, regression, testcase)

Crash Data

Attachments

(2 files)

Attached file testcase
See testcase, which crashes current trunk build when javascript is turned off.

This regressed between 2007-06-22 and 2007-06-23, regression from bug 379025.

http://crash-stats.mozilla.com/report/index/8017267a-834d-11dc-a6fa-001a4bd43ed6
0  	RtlAllocateHeap  	
1 	msvcr80.dll@0x4d82
Flags: blocking1.9?
Attached patch Punt!Splinter Review
I should have done this so long ago! This patch makes us not bother collecting misplaced content in the head. This means that we throw out content. But you really, *really*, shouldn't be doing this anyway, so I don't care that much.
Assignee: nobody → mrbkap
Status: NEW → ASSIGNED
Attachment #286227 - Flags: superreview?
Attachment #286227 - Flags: review?(jonas)
Attachment #286227 - Flags: superreview? → superreview?(jst)
Attachment #286227 - Flags: superreview?(jst) → superreview+
Flags: blocking1.9? → blocking1.9+
Fix checked in.
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
Verified fixed, using:
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9b2pre) Gecko/2007112805 Minefield/3.0b2pre
Status: RESOLVED → VERIFIED
Crash Signature: [@ RtlAllocateHeap]
You need to log in before you can comment on or make changes to this bug.