616748 - "ASSERTION: LoadObject was reentered" moving <applet>

Status: RESOLVED WORKSFORME

(Core Graveyard :: Plug-ins, defect)

Description

[Jesse Ruderman]

Attachment: testcase

###!!! ASSERTION: about to crash due to bug 136927: '!mPreventInstantiation || (mContent && mContent->GetCurrentDoc()->GetDisplayDocument())', file c:/Users/jruderman/mozilla-central/layout/generic/nsObjectFrame.cpp, line 678

###!!! ASSERTION: LoadObject was reentered?: '!mInstantiating', file c:/Users/jruderman/mozilla-central/content/base/src/nsObjectLoadingContent.cpp, line 1185

Plugin check says my Java is up-to-date:
  Java Deployment Toolkit 6.0.220.4
    NPRuntime Script Plug-in Library for Java(TM) Deploy 	1.6.0.22
  Java(TM) Platform SE 6 U22
    Next Generation Java Plug-in 1.6.0_22 for Mozilla browsers 	1.6.0.22

Comment 1

[Jesse Ruderman]

Attachment: log including stack traces

To get this log, I disabled the JS JITs and ran:

XPCOM_MEM_LEAK_LOG=2 XPCOM_DEBUG_BREAK=stack firefox jj.html 2>&1 | tee a.txt

Comment 2

[Boris Zbarsky [:bzbarsky]]

The first assert there is the real issue; the other is just a corollary.

Comment 3

[Jesse Ruderman]

WFM on trunk. Likely fixed along with bug 136927.