Closed Bug 520708 Opened 16 years ago Closed 16 years ago

Crash [@nsRefPtr<mozilla::WebGLFramebuffer>::assign_assuming_AddRef]

Categories

(Core :: Graphics: Canvas2D, defect)

x86
Windows XP
defect
Not set
critical

Tracking

()

RESOLVED FIXED
Tracking Status
blocking2.0 --- final+

People

(Reporter: pvnick, Assigned: mwsteele)

References

Details

Attachments

(3 files)

Attached file testcase
No description provided.
Attached file stack
I could be wrong, but in WebGLContext::BindFramebuffer WebGLFramebuffer *wfb = static_cast<WebGLFramebuffer*>(fb); looks scary. static_cast to a concrete class from some object which is coming from web page.
Blocks: 513156
blocking2.0: --- → ?
Attachment #408801 - Flags: review?(vladimir)
Attachment #408801 - Flags: review+
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → FIXED
blocking2.0: ? → final+
Group: core-security → core-security-release
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: