Closed
Bug 497633
Opened 16 years ago
Closed 16 years ago
Crash [@ nsFocusManager::Focus] with onblur removing window on frameset
Categories
(Core :: XUL, defect)
Tracking
()
VERIFIED
FIXED
People
(Reporter: martijn.martijn, Assigned: enndeakin)
References
Details
(Keywords: crash, regression, testcase)
Crash Data
Attachments
(2 files, 1 obsolete file)
|
618 bytes,
text/html
|
Details | |
|
6.79 KB,
patch
|
smaug
:
review+
smaug
:
superreview+
|
Details | Diff | Splinter Review |
See testcase, which crashes current trunk build after 1 second or so.
http://crash-stats.mozilla.com/report/index/0be00035-01af-4d54-9d16-4879b2090611?p=1
0 xul.dll nsFocusManager::Focus dom/base/nsFocusManager.cpp:1407
1 xul.dll nsFocusManager::SetFocusInner dom/base/nsFocusManager.cpp:1057
2 xul.dll nsFocusManager::SetFocus dom/base/nsFocusManager.cpp:411
3 xul.dll nsGenericHTMLElement::Focus content/html/content/src/nsGenericHTMLElement.cpp:2931
4 xul.dll nsGenericHTMLElementTearoff::Focus content/html/content/src/nsGenericHTMLElement.cpp:190
5 xul.dll NS_InvokeByIndex_P xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp:101
6 xul.dll XPCWrappedNative::CallMethod js/src/xpconnect/src/xpcwrappednative.cpp:2478
The iframe content is this:
<html xmlns="http://www.w3.org/1999/xhtml">
<iframe/>
<frameset onblur="window.frameElement.parentNode.removeChild(window.frameElement)"/>
<script>
function doe(i){
document.getElementsByTagName('*')[1].focus();
}
setTimeout(doe,100);
</script>
</html>
|
Assignee | |
Comment 1•16 years ago
|
||
Assignee: nobody → enndeakin
Status: NEW → ASSIGNED
|
Reporter | |
Comment 2•16 years ago
|
||
Did you mean to ask review for the patch?
|
|
Assignee | |
Comment 3•16 years ago
|
||
This also includes the patch and test for bug 497878.
Attachment #382806 -
Attachment is obsolete: true
Attachment #383971 -
Flags: review?(Olli.Pettay)
Attachment #383971 -
Flags: superreview+
Attachment #383971 -
Flags: review?(Olli.Pettay)
Attachment #383971 -
Flags: review+
|
|
Assignee | |
Comment 4•16 years ago
|
||
Status: ASSIGNED → RESOLVED
Closed: 16 years ago
Resolution: --- → FIXED
|
|
Reporter | |
Updated•16 years ago
|
Status: RESOLVED → VERIFIED
|
|
Assignee | |
Updated•16 years ago
|
Flags: in-testsuite+
|
||
Updated•14 years ago
|
Crash Signature: [@ nsFocusManager::Focus]
You need to log in
before you can comment on or make changes to this bug.
Description
•