Closed Bug 856262 Opened 11 years ago Closed 11 years ago

Crash [@ mozilla::FrameLayerBuilder::GetDedicatedLayer] with <applet>, mutation event

Categories

(Core Graveyard :: Plug-ins, defect)

Product:
Core Graveyard
Component:
Plug-ins
Platform:
x86_64
macOS
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(Not tracked)

Status:
RESOLVED WORKSFORME

People

(Reporter: jruderman, Assigned: johns)

References

(Blocks 1 open bug)

Details

(Keywords: crash, csectype-framepoisoning, testcase)

Crash Data

Attachments

(3 files)

testcase (crashes Firefox when loaded)
389 bytes, text/html
Details
stack (ASan)
2.29 KB, text/plain
Details
stack (gdb)
7.56 KB, text/plain
Details 
This is on Mac OS X 10.8, with the "Java Plugin" shim but no Java.

I'm not sure what's causing a mutation event.

Nightly: bp-e9b9abe1-356d-4cbe-bbbf-dae882130330
Attached file stack (ASan) — 

    
    

    
  

      
      
      
      

        Attached file
          
        stack (gdb)
        — 
      

    


  

    
    

    
  
Probably the same root cause as bug 856262
Assignee: nobody → jschoenick
Blocks: 784131

    
    

    
  
(In reply to John Schoenick [:johns] from comment #3)
> Probably the same root cause as bug 856262

Err, bug 854082

    
  
Crash Signature: [@ mozilla::FrameLayerBuilder::GetDedicatedLayer] → [@ mozilla::FrameLayerBuilder::GetDedicatedLayer(nsIFrame*, unsigned int) ]

    
  
See Also:  → 858773

    
    

    
  
Does this still occur? I suspect this was ultimately fixed by bug 863792
Flags: needinfo?(jruderman)
See Also: 858773 → 

    
    

    
  
WFM
Status: NEW → RESOLVED
Closed: 11 years ago
Flags: needinfo?(jruderman)
Resolution: --- → WORKSFORME

    
  
Product: Core → Core Graveyard

          You need to log in
          before you can comment on or make changes to this bug.
        






  

    
  







  

    

      
Attachment

      

      
      
      
      
    

    

      

        

          

            
General

            

              Creator: 



            

            
Created: 

            
Updated: 

            
Size: