Closed Bug 508860 Opened 15 years ago Closed 14 years ago
Crash [@ ns
Canvas Rendering Context2D::Initialize With Surface]
Looks like nsCanvasRenderingContext2D::SetDimensions passes a null surface to nsCanvasRenderingContext2D::InitializeWithSurface, which doesn't know how to deal with that.
Assignee: nobody → tellrob
on windows: bp-90c26b0b-bfb9-460a-a4a4-af6e52090809
OS: Mac OS X → All
afaict application NULL stuff is not exploitable on recent linux (unless the offset is higher than sys/vm/mmap_min_addr). i have read that on arm architecture 0 is mmaped by default so this may be a problem on arm.
... i mean on recent i386/x86_64 linux
This seems to fix the crash.
Attachment #393558 - Flags: review?(vladimir)
Attachment #393558 - Flags: review?(vladimir) → review+
Comment on attachment 393558 [details] [diff] [review] v1.0 [Checkin: Comment 6 & 7] http://hg.mozilla.org/mozilla-central/rev/bf607bae5e38
Attachment #393558 - Attachment description: v1.0 → v1.0 [Checkin: Comment 6]
Status: ASSIGNED → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
Whiteboard: [c-n: m-1.9.2]
Target Milestone: --- → mozilla1.9.3a1
Comment on attachment 393558 [details] [diff] [review] v1.0 [Checkin: Comment 6 & 7] http://hg.mozilla.org/releases/mozilla-1.9.2/rev/acf72836efcb
Attachment #393558 - Attachment description: v1.0 [Checkin: Comment 6] → v1.0 [Checkin: Comment 6 & 7]
Crash Signature: [@ nsCanvasRenderingContext2D::InitializeWithSurface]
You need to log in before you can comment on or make changes to this bug.