Closed Bug 674223 Opened 10 years ago Closed 10 years ago
Instance Owner already registered as a listener" and crash
(Mac OS X 10.6.8, "QuickTime Plug-in 7.6.6".) 1. Apply the patch in bug 90268. 2. Make a 32-bit debug build (so QuickTime will work). 3. Load the testcase. Result: ###!!! ASSERTION: pluginInstanceOwner already registered as a listener: '!sCARefreshListeners->Contains(aPluginInstance)', file dom/plugins/base/nsPluginInstanceOwner.cpp, line 1408 4. Quit the browser. Result: Exploitable-looking crash [@ @0x55555555 | nsTimerImpl::Fire]
Too late for 6, I think, but tracking for newer releases. Josh, this sounds very related to what you're already working on, plugin ownership stuff that is. Can you have a look? Maybe you've already fixed this in your branch...?
Jesse's report makes it look like this only happens with my patch for bug 90268 applied. I've made a lot of changes to the patch since July 26th, when this was filed, and I can no longer reproduce. Jesse - if you're able to repro again please re-open this. Thanks!
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.