Closed Bug 788252 Opened 12 years ago Closed 12 years ago

"ASSERTION: switched to type null but also loaded something" with <embed src="#a">

Categories

(Core Graveyard :: Plug-ins, defect)

x86_64
macOS
defect
Not set
normal

Tracking

(Not tracked)

RESOLVED FIXED
mozilla20

People

(Reporter: jruderman, Assigned: johns)

References

Details

(Keywords: assertion, regression, testcase)

Attachments

(3 files)

Attached file testcase
###!!! ASSERTION: switched to type null but also loaded something: '!mFrameLoader && !mInstanceOwner', file content/base/src/nsObjectLoadingContent.cpp, line 1832

###!!! ASSERTION: LoadFallback called with loaded content: '!mInstanceOwner && !mFrameLoader && !mChannel', file content/base/src/nsObjectLoadingContent.cpp, line 2267
Attached file stack trace
Bug 745030 regression :(
Assignee: nobody → jschoenick
Status: NEW → ASSIGNED
Blocks: 745030
This is actually less scary than I assumed, we're just not throwing away the frame loader upon detecting a recursive load.
Attachment #668680 - Flags: review?(joshmoz)
Attachment #668680 - Flags: review?(joshmoz) → review+
Comment on attachment 668680 [details] [diff] [review]
Cleanup frame loader when aborting a recursive load in object/embed tags

https://hg.mozilla.org/integration/mozilla-inbound/rev/d08aa6a12f1a
Attachment #668680 - Flags: checkin+
https://hg.mozilla.org/mozilla-central/rev/d08aa6a12f1a
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla20
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: