Closed
Bug 742237
Opened 13 years ago
Closed 13 years ago
Crash [@ nsMutationReceiver::NodeWillBeDestroyed] during GC
Categories
(Core :: DOM: Core & HTML, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: jruderman, Assigned: smaug)
Details
(Keywords: crash, testcase, Whiteboard: [sg:critical])
Attachments
(4 files, 1 obsolete file)
|
242 bytes,
text/html
|
Details | |
|
3.78 KB,
text/plain
|
Details | |
|
979 bytes,
patch
|
sicking
:
review+
|
Details | Diff | Splinter Review |
|
1015 bytes,
patch
|
Details | Diff | Splinter Review |
This testcase causes a crash during the next GC, or later. Running with
MallocScribble=1 MallocPreScribble=1
helps make it crash during the GC rather than later.
|
Reporter | |
Comment 1•13 years ago
|
||
|
Assignee | |
Comment 3•13 years ago
|
||
Attachment #612139 -
Flags: review?(jonas)
|
|
Assignee | |
Comment 4•13 years ago
|
||
Comment on attachment 612139 [details] [diff] [review]
patch
er, silly me
Attachment #612139 -
Attachment is obsolete: true
Attachment #612139 -
Flags: review?(jonas)
|
|
Assignee | |
Comment 5•13 years ago
|
||
Attachment #612145 -
Flags: review?(jonas)
Attachment #612145 -
Flags: review?(jonas) → review+
Might be worth adding a comment to the extent of "do this last since it can cause us to be destroyed."
|
|
Assignee | |
Comment 7•13 years ago
|
||
|
|
Assignee | |
Comment 8•13 years ago
|
||
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
|
|
Reporter | |
Updated•13 years ago
|
Keywords: sec-critical
|
||
Updated•13 years ago
|
Keywords: sec-critical
Whiteboard: [sg:critical]
|
||
Updated•6 years ago
|
Component: DOM → DOM: Core & HTML
You need to log in
before you can comment on or make changes to this bug.
Description
•