Closed
Bug 405182
Opened 17 years ago
Closed 17 years ago
Crash [@ nsScriptLoader::ProcessScriptElement] with mutation events, removing root
Categories
(Core :: DOM: Core & HTML, defect, P2)
Core
DOM: Core & HTML
Tracking
()
VERIFIED
FIXED
mozilla1.9beta2
People
(Reporter: jruderman, Assigned: MatsPalmgren_bugz)
References
Details
(Keywords: crash, regression, testcase)
Crash Data
Attachments
(3 files, 1 obsolete file)
443 bytes,
text/html
|
Details | |
12.83 KB,
text/plain
|
Details | |
4.15 KB,
patch
|
Details | Diff | Splinter Review |
Loading the testcase makes Firefox crash [@ nsScriptLoader::ProcessScriptElement].
Assignee | ||
Updated•17 years ago
|
Flags: in-testsuite?
Flags: blocking1.9?
OS: Mac OS X → All
Hardware: PC → All
Assignee | ||
Comment 1•17 years ago
|
||
Null-ptr crash with no root content: http://bonsai.mozilla.org/cvsblame.cgi?file=/mozilla/content/base/src/nsScriptLoader.cpp&rev=1.110&root=/cvsroot&mark=276#235
Assignee | ||
Comment 2•17 years ago
|
||
Comment 3•17 years ago
|
||
That looks pretty reasonable... Ask jst to check it out?
Blocks: dom-agnostic
Keywords: regression
Assignee | ||
Updated•17 years ago
|
Attachment #290032 -
Flags: superreview?(jst)
Attachment #290032 -
Flags: review?(jst)
Updated•17 years ago
|
Flags: blocking1.9? → blocking1.9+
Updated•17 years ago
|
Priority: -- → P2
Comment 4•17 years ago
|
||
Comment on attachment 290032 [details] [diff] [review] fix? Yeah, looks good.
Attachment #290032 -
Flags: superreview?(jst)
Attachment #290032 -
Flags: superreview+
Attachment #290032 -
Flags: review?(jst)
Attachment #290032 -
Flags: review+
Assignee | ||
Comment 5•17 years ago
|
||
I'll land as soon as 'qm-win2k3-01' is green...
Assignee: nobody → mats.palmgren
Attachment #290032 -
Attachment is obsolete: true
Status: NEW → ASSIGNED
Assignee | ||
Comment 6•17 years ago
|
||
mozilla/content/base/src/nsScriptLoader.cpp 1.111 mozilla/content/base/test/Makefile.in 1.34 mozilla/content/base/test/test_bug405182.html 1.1 -> FIXED
Status: ASSIGNED → RESOLVED
Closed: 17 years ago
Flags: in-testsuite? → in-testsuite+
Resolution: --- → FIXED
Target Milestone: --- → mozilla1.9 M10
Comment 7•17 years ago
|
||
Verified fixed, using: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9b2pre) Gecko/2007120605 Minefield/3.0b2pre It also doesn't crash with the latest branch build.
Status: RESOLVED → VERIFIED
Updated•13 years ago
|
Crash Signature: [@ nsScriptLoader::ProcessScriptElement]
Updated•5 years ago
|
Component: DOM → DOM: Core & HTML
You need to log in
before you can comment on or make changes to this bug.
Description
•