Created attachment 558106 [details]
I'm guessing this is a regression from bug 639720.
Created attachment 558107 [details]
Created attachment 558496 [details] [diff] [review]
Restore missing null-check for location setter.
Requesting tracking for this crash regression, on the wild chance that we don't get the patch landed before aurora branch.
Adding the Windows specific signature so it shows up in crash stats.
Backed out - https://tbpl.mozilla.org/?tree=Mozilla-Inbound&usebuildbot=1&rev=d01a282b5a40 should be the clearest rev to see the orange from this set, free from the leak that backout fixed.
Yeah, this caused the orange. The issue was that we were wrapping the nsIDOMLocation into vp _before_ doing the JS_ValueToString! I switched the order of those, and things are peachy now. Pushed http://hg.mozilla.org/integration/mozilla-inbound/rev/575af26e14b8
Landed in 9, not tracking now.