Closed Bug 48132 Opened 25 years ago Closed 25 years ago

Bad editor observer list causes crash

Categories

(Core :: DOM: Editor, defect, P3)

defect

Tracking

()

VERIFIED FIXED

People

(Reporter: sfraser_bugs, Assigned: mozeditor)

Details

(Keywords: crash, testcase, Whiteboard: [nsbeta3+])

Attachments

(1 file)

I'm seeing a crash in nsEditor::NotifyEditorObservers() when using JS to set the selection in a textfield in an HTML page (see attachment). To repro, do this: Load the attached testcase. Type into the 'Selection Start' edit filed (or just delete the '1'). You'll crash in nsEditor::NotifyEditorObservers() because somehow a bad obserer got into the list.
Attached file testcase
Doea that on Linux, too.
Severity: normal → critical
Keywords: crash
OS: Mac System 8.5 → All
Ugh. What's happening here is that calling observer->EditAction() on one of the observers is adding and removing observers from the list (because of focus/blur changes). Yuck.
this bites.
Status: NEW → ASSIGNED
Keywords: testcase
nasty little crash -- setting to nsbeta3+
Whiteboard: [nsbeta3+]
fixed
Status: ASSIGNED → RESOLVED
Closed: 25 years ago
Resolution: --- → FIXED
marking verified.
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: