Closed Bug 612525 Opened 14 years ago Closed 14 years ago

crash [@ nsEditor::DeleteNode(nsIDOMNode*) ]

Categories

(Core :: DOM: Editor, defect)

Product:
Core
Component:
DOM: Editor
Platform:
x86
Windows 7
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 612447
Tracking Flags:
Tracking Status
blocking2.0 --- beta8+

People

(Reporter: scoobidiver, Assigned: ehsan.akhgari)

Details

(Keywords: crash, regression, Whiteboard: [sg:dupe 612447])

Crash Data

Build: Mozilla/5.0 (Windows NT 6.1; rv:2.0b8pre) Gecko/20101115 Firefox/4.0b8pre

It is a new crash signature that was introduced by this build.
It is #16 top crasher in this build.

Signature	nsEditor::DeleteNode(nsIDOMNode*)
UUID	8d5be0c6-7b2b-4443-89c9-dab982101115
Time 	2010-11-15 16:37:37.927244
Uptime	631
Last Crash	661 seconds (11.0 minutes) before submission
Install Age	24255 seconds (6.7 hours) since version was first installed.
Product	Firefox
Version	4.0b8pre
Build ID	20101115042202
Branch	2.0
OS	Windows NT
OS Version	6.1.7600
CPU	x86
CPU Info	GenuineIntel family 6 model 23 stepping 10
Crash Reason	EXCEPTION_ACCESS_VIOLATION_READ
Crash Address	0x1c4
App Notes 	AdapterVendorID: 8086, AdapterDeviceID: 2a42

Frame 	Module 	Signature [Expand] 	Source
0 	xul.dll 	nsEditor::DeleteNode 	
1 	xul.dll 	nsHTMLEditor::DeleteNode 	editor/libeditor/html/nsHTMLEditor.cpp:3805
2 	xul.dll 	nsHTMLEditRules::DocumentModifiedWorker 	editor/libeditor/html/nsHTMLEditRules.cpp:9181
3 	xul.dll 	nsRunnableMethodImpl<void 	obj-firefox/dist/include/nsThreadUtils.h:347
4 	xul.dll 	nsContentUtils::RemoveScriptBlocker 	content/base/src/nsContentUtils.cpp:4753
5 	xul.dll 	nsHTMLDocument::EndUpdate 	content/html/document/src/nsHTMLDocument.cpp:2938
6 	xul.dll 	nsINode::ReplaceOrInsertBefore 	content/base/src/nsGenericElement.cpp:4283
7 	xul.dll 	nsIDOMNode_InsertBefore 	obj-firefox/js/src/xpconnect/src/dom_quickstubs.cpp:6010
8 	mozjs.dll 	GetPropCompiler::generateArrayLengthStub 	js/src/methodjit/PolyIC.cpp:894
9 	mozjs.dll 	js::mjit::ic::NativeCall 	js/src/methodjit/MonoIC.cpp:851
10 	xul.dll 	mozilla::FramePropertyTable::Get 	layout/base/FramePropertyTable.cpp:105

The regression range is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=674f2ed15cea&tochange=edf41ff32f08

More reports at:
http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=exact&query=&range_value=4&range_unit=weeks&hang_type=any&process_type=any&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&admin=&signature=nsEditor%3A%3ADeleteNode%28nsIDOMNode*%29
Ehsan?
Assignee: nobody → ehsan
blocking2.0: --- → beta8+
Bug 612447 has STR.
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → DUPLICATE
Group: core-security
Whiteboard: [sg:dupe 612447]
Crash Signature: [@ nsEditor::DeleteNode(nsIDOMNode*) ]
Group: core-security
You need to log in before you can comment on or make changes to this bug.