Created attachment 725831 [details] testcase Assertion failure: win, at /Users/jruderman/trees/mozilla-central/dom/base/nsDOMClassInfo.cpp:3705 I'm guessing it would crash on the next line in a non-debug build. [@ nsWindowSH::GlobalScopePolluterNewResolve] This is a regression from today's merge from inbound. I'm guessing bug 850517. http://hg.mozilla.org/mozilla-central/pushloghtml?changeset=0b052daa913c
This is the #1 topcrasher on nightly, and the fix is trivial, so I'm checking it in directly to m-c. I massaged the testcase here for a while, but couldn't get it to work as a crashtest. Cutting my losses for now and pushing: https://hg.mozilla.org/mozilla-central/rev/b03bb3ce8cee
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
This is another reason getting the window from the document is wrong, imo...
Crash Signature: [@ nsWindowSH::GlobalScopePolluterNewResolve(JSContext*, JS::Handle<JSObject*>, JS::Handle<int>, unsigned int, JS::MutableHandle<JSObject*>)]
status-firefox21: --- → unaffected
status-firefox22: --- → fixed
tracking-firefox22: --- → +
You need to log in before you can comment on or make changes to this bug.