crash [@ nsHTMLEditor::RemoveStyleInside] if !aAttribute

RESOLVED FIXED in mozilla8

Status

()

Core
Editor
--
critical
RESOLVED FIXED
7 years ago
6 years ago

People

(Reporter: timeless, Assigned: kaze)

Tracking

({coverity, crash})

Trunk
mozilla8
coverity, crash
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [post-2.0], crash signature)

Attachments

(1 attachment)

(Reporter)

Description

7 years ago
649 nsresult nsHTMLEditor::RemoveStyleInside(nsIDOMNode *aNode, 

677     // if we weren't passed an attribute, then we want to 
678     // remove any matching inlinestyles entirely
679     if (!aAttribute || aAttribute->IsEmpty())

764   if ( aProperty == nsEditProperty::font &&    // or node is big or small and we are setting font size
765        (nsHTMLEditUtils::IsBig(aNode) || nsHTMLEditUtils::IsSmall(aNode)) &&
766        aAttribute->LowerCaseEqualsLiteral("size"))
Assignee: nobody → ehsan
Whiteboard: [post-2.0]
Crash Signature: [@ nsHTMLEditor::RemoveStyleInside]
Assignee: ehsan → kaze
(Assignee)

Updated

6 years ago
Status: NEW → ASSIGNED
(Assignee)

Comment 1

6 years ago
Created attachment 548591 [details] [diff] [review]
patch proposal
Attachment #548591 - Flags: review?(ehsan)
Attachment #548591 - Flags: review?(ehsan) → review+
http://hg.mozilla.org/mozilla-central/rev/f6545ec92d4c
Status: ASSIGNED → RESOLVED
Last Resolved: 6 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla8
You need to log in before you can comment on or make changes to this bug.