Crash using screen object from removed iframe

RESOLVED FIXED in Firefox 14

Status

()

Core
DOM
--
critical
RESOLVED FIXED
5 years ago
5 years ago

People

(Reporter: Jesse Ruderman, Assigned: mounir)

Tracking

(Blocks: 1 bug, {crash, regression, testcase})

Trunk
mozilla14
crash, regression, testcase
Points:
---
Dependency tree / graph
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(firefox14- verified)

Details

(Whiteboard: [qa+], crash signature)

Attachments

(3 attachments)

(Reporter)

Description

5 years ago
Probably a regression from bug 720799 based on this line:

#3  0x00000001014af0a3 in nsLayoutUtils::GetDeviceContextForScreenInfo (aWindow=0x0) at layout/base/nsLayoutUtils.cpp:3994
(Reporter)

Comment 1

5 years ago
Created attachment 615092 [details]
testcase (crashes Firefox when loaded)
(Reporter)

Comment 2

5 years ago
Created attachment 615093 [details]
stack trace

Opt: bp-0aa7875f-3312-4a04-856a-da58c2120415

Comment 3

5 years ago
On Windows 7: bp-8dfd1391-5ed0-402e-8746-e52972120415
Severity: normal → critical
Crash Signature: [@ nsLayoutUtils::GetDeviceContextForScreenInfo] → [@ nsLayoutUtils::GetDeviceContextForScreenInfo] [@ nsPIDOMWindow::GetDocShell()]
Keywords: crash, regression, testcase
OS: Mac OS X → All
Hardware: x86_64 → All
(Assignee)

Comment 4

5 years ago
Created attachment 615135 [details] [diff] [review]
Patch v1
Assignee: nobody → mounir
Status: NEW → ASSIGNED
Attachment #615135 - Flags: review?(bugs)
(Assignee)

Updated

5 years ago
tracking-firefox14: --- → ?

Updated

5 years ago
Attachment #615135 - Flags: review?(bugs) → review+
(Assignee)

Updated

5 years ago
status-firefox14: --- → fixed
Flags: in-testsuite+
Target Milestone: --- → mozilla14
(Assignee)

Updated

5 years ago
Attachment #615135 - Flags: checkin+
https://hg.mozilla.org/mozilla-central/rev/61088f8aa842
Status: ASSIGNED → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED

Updated

5 years ago
tracking-firefox14: ? → -

Comment 6

5 years ago
Verified that Firefox 14 beta 8 does not crash when using the test case attached in Comment 1.

Verified on Windows 7, Ubuntu 12.04 and Mac OS X 10.6:
Mozilla/5.0 (Windows NT 6.1; rv:14.0) Gecko/20100101 Firefox/14.0
Mozilla/5.0 (X11; Linux i686; rv:14.0) Gecko/20100101 Firefox/14.0
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:14.0) Gecko/20100101 Firefox/14.0

Verified also in Socorro and I couldn't find any crash reports with the same signature.
status-firefox14: fixed → verified
Whiteboard: [qa+]
You need to log in before you can comment on or make changes to this bug.