Closed Bug 859700 Opened 12 years ago Closed 12 years ago

use after free (mozilla::dom::FragmentOrElement::Release)

Categories

(Core :: Audio/Video, defect)

Other Branch
x86
macOS
defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 855174

People

(Reporter: rforbes, Unassigned)

References

Details

(Keywords: crash, testcase)

Attachments

(2 files)

Attached file testcase
using peach this is a use after free that was found. testcase and stacktrace included.
Attached file stacktrace
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → DUPLICATE
Group: core-security
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: