new 1.9.2.17 crash [@ nsCOMPtr_base::assign_with_AddRef(nsISupports*) | nsCOMPtr<nsIFocusController>::operator=(nsIFocusController*) | nsEventStateManager::PostHandleEvent(nsPresContext*, nsEvent*, nsIFrame*, nsEventStatus*, nsIView*)]

RESOLVED WORKSFORME

Status

()

Core
General
--
critical
RESOLVED WORKSFORME
7 years ago
2 years ago

People

(Reporter: dveditz, Unassigned)

Tracking

({crash, qawanted, regression})

1.9.2 Branch
x86
Windows NT
crash, qawanted, regression
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [sg:dos], crash signature)

(Reporter)

Description

7 years ago
This bug was filed from the Socorro interface and is 
report bp-3c39fe17-a597-43d1-a13b-0c1602110428 .
============================================================= 

This signature appears to be a new in Firefox 3.6.17--looks like a frame-poisoned dereference and does not appear to be exploitable. The numbers of crashes are small so far, but each of them appears to have come from a unique user.
(Reporter)

Comment 1

7 years ago
qawanted: can we pin down the regression window on this one? Probably not without a testcase :-(

I may have missed some, but the only check-in I see related to frames is bug 619021 (didn't see any related to focus or events).

http://hg.mozilla.org/releases/mozilla-1.9.2/pushloghtml?startdate=2011-01-21&enddate=2011-04-14
Keywords: qawanted, testcase-wanted
(Reporter)

Updated

7 years ago
Component: General → General
Product: Firefox → Core
QA Contact: general → general
Summary: crash [@ nsCOMPtr_base::assign_with_AddRef(nsISupports*) | nsCOMPtr<nsIFocusController>::operator=(nsIFocusController*) | nsEventStateManager::PostHandleEvent(nsPresContext*, nsEvent*, nsIFrame*, nsEventStatus*, nsIView*)] → new 1.9.2.17 crash [@ nsCOMPtr_base::assign_with_AddRef(nsISupports*) | nsCOMPtr<nsIFocusController>::operator=(nsIFocusController*) | nsEventStateManager::PostHandleEvent(nsPresContext*, nsEvent*, nsIFrame*, nsEventStatus*, nsIView*)]
Version: unspecified → 1.9.2 Branch
(Assignee)

Updated

7 years ago
Crash Signature: [@ nsCOMPtr_base::assign_with_AddRef(nsISupports*) | nsCOMPtr<nsIFocusController>::operator=(nsIFocusController*) | nsEventStateManager::PostHandleEvent(nsPresContext*, nsEvent*, nsIFrame*, nsEventStatus*, nsIView*)]
Resolving per Crashstats http://bit.ly/KHq5cW (no Crashes given with this Signature).
Status: NEW → RESOLVED
Last Resolved: 6 years ago
Resolution: --- → WORKSFORME
Keywords: regressionwindow-wanted, testcase-wanted
You need to log in before you can comment on or make changes to this bug.