Closed
Bug 711651
Opened 13 years ago
Closed 13 years ago
Crash after mutating DOM from MozBeforeResize event
Categories
(Core :: DOM: Core & HTML, defect)
Tracking
()
VERIFIED
FIXED
mozilla11
| Tracking | Status | |
|---|---|---|
| firefox9 | --- | affected |
| firefox10 | --- | verified |
| firefox11 | --- | verified |
| firefox12 | --- | verified |
| firefox-esr10 | --- | unaffected |
| status1.9.2 | --- | unaffected |
People
(Reporter: jruderman, Assigned: smaug)
Details
(Keywords: crash, testcase, Whiteboard: [sg:critical])
Crash Data
Attachments
(3 files)
|
495 bytes,
text/html
|
Details | |
|
5.20 KB,
text/plain
|
Details | |
|
2.73 KB,
patch
|
roc
:
review+
christian
:
approval-mozilla-aurora+
|
Details | Diff | Splinter Review |
Crash [@ PresShell::ResizeReflowIgnoreOverride]
| Reporter | ||
Comment 1•13 years ago
|
||
| Assignee | ||
Updated•13 years ago
|
Assignee: nobody → bugs
OS: Mac OS X → All
| Assignee | ||
Updated•13 years ago
|
Group: core-security
| Assignee | ||
Comment 2•13 years ago
|
||
Keep things alive, and make sure rootFrame points always to a valid object.
Moving kungFuDeathGrip is enough to fix this bug, but rootFrame handling
looks extremely suspicious.
Attachment #582431 -
Flags: review?(roc)
Attachment #582431 -
Flags: review?(roc) → review+
| Assignee | ||
Comment 3•13 years ago
|
||
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
| Assignee | ||
Updated•13 years ago
|
Attachment #582431 -
Flags: approval-mozilla-aurora?
Attachment #582431 -
Flags: approval-mozilla-aurora? → approval-mozilla-aurora+
| Assignee | ||
Comment 4•13 years ago
|
||
status-firefox10:
--- → fixed
status-firefox11:
--- → fixed
Comment 5•13 years ago
|
||
The need to add a "kungFuDeathGrip" is usually the sign of a potential sg:critical bug, marking as such.
The 1.9.2 branch is unaffected.
from comment #2
> Moving kungFuDeathGrip is enough to fix this bug, but rootFrame handling
> looks extremely suspicious.
Do we need another bug to investigate that before un-hiding this one?
status1.9.2:
--- → unaffected
status-firefox12:
--- → fixed
status-firefox9:
--- → affected
Whiteboard: [sg:?][qa+] → [sg:critical][qa+]
Target Milestone: --- → mozilla11
Updated•13 years ago
|
Updated•13 years ago
|
Updated•13 years ago
|
Updated•13 years ago
|
Status: RESOLVED → VERIFIED
Whiteboard: [sg:critical][qa+] → [sg:critical]
Updated•13 years ago
|
Group: core-security
status-firefox-esr10:
--- → unaffected
Updated•6 years ago
|
Component: DOM → DOM: Core & HTML
You need to log in
before you can comment on or make changes to this bug.
Description
•