Created attachment 593943 [details] XPI with test case. Press CrashMe to reproduce User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_2) AppleWebKit/535.7 (KHTML, like Gecko) Chrome/16.0.912.77 Safari/535.7 Steps to reproduce: Attaching XBL via elem.style.MozBinding = 'url(...)' Actual results: Firefox Crash Expected results: XBL should be attached
Created attachment 593944 [details] Testcase sources Check case1.xul to see how XBL is applied and case1.xml to see XBL itself. Browser is crashing while loading XBL document.
This issue is similiar to 199851, but I think a lot of things changed since 2003.
Can you provide a link to the corresponding crash report from about:crashes?
This looks like a null-deref crash due to XBL fastload. Are we trying to write out a null function object or something?
Created attachment 595501 [details] [diff] [review] null check for method
Comment on attachment 595501 [details] [diff] [review] null check for method r=me