Closed
Bug 812929
Opened 13 years ago
Closed 13 years ago
imgRequestProxy crash with contenteditable, list-style-image
Categories
(Core :: Graphics: ImageLib, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 788959
People
(Reporter: jruderman, Assigned: jdm)
References
Details
(Keywords: crash, sec-critical, testcase, Whiteboard: [sg:dupe 788959])
Crash Data
Attachments
(2 files, 1 obsolete file)
Sometimes this appears as imgRequestProxy::BlockOnload calling a random address.
|
Reporter | |
Comment 1•13 years ago
|
||
|
|
Reporter | |
Updated•13 years ago
|
Keywords: sec-critical
|
Assignee | |
Comment 2•13 years ago
|
||
With this patch I wasn't able to reproduce the intermittent crash in many minutes of frequent refreshing through multiple tabs.
Attachment #683771 -
Flags: review?(bzbarsky)
|
|
Assignee | |
Updated•13 years ago
|
Assignee: nobody → josh
|
|
Assignee | |
Comment 3•13 years ago
|
||
Comment on attachment 683771 [details] [diff] [review]
Clear the listener associated with cancelled bullet frame image requests.
Wrong bug.
Attachment #683771 -
Flags: review?(bzbarsky)
|
|
Assignee | |
Updated•13 years ago
|
Attachment #683771 -
Attachment is obsolete: true
|
|
Assignee | |
Comment 4•13 years ago
|
||
I can't seem to reproduce this with the patch in bug 788959 applied.
|
|
Reporter | |
Updated•13 years ago
|
Depends on: CVE-2013-0762
|
||
Updated•13 years ago
|
Whiteboard: [Fix on bug 788959] → [sg:dupe 788959]
|
|
||
Updated•13 years ago
|
Group: core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•