Open Bug 803372 Opened 13 years ago Updated 3 years ago

"ASSERTION: container didn't take ownership" mutating a deleted, matched CSS rule

Categories

(Core :: CSS Parsing and Computation, defect)

x86_64
macOS
defect

Tracking

()

People

(Reporter: jruderman, Unassigned)

Details

(Keywords: assertion, testcase)

Attachments

(2 files)

Attached file testcase
###!!! ASSERTION: container didn't take ownership: 'Not Reached', file layout/style/StyleRule.cpp, line 1129 Not sure if this is a security issue. Too-low refcnts scare me, but there's a runtime check for this particular Release() returning zero.
Attached file stack
I think this assertion is just bogus, precisely because we may not have a container...
Group: core-security
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: