use after free (mozilla::dom::FragmentOrElement::Release)

RESOLVED DUPLICATE of bug 855174

Status

()

Core
Audio/Video
RESOLVED DUPLICATE of bug 855174
5 years ago
3 years ago

People

(Reporter: rforbes, Unassigned)

Tracking

(Blocks: 1 bug, {crash, testcase})

Other Branch
x86
Mac OS X
crash, testcase
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(2 attachments)

(Reporter)

Description

5 years ago
Created attachment 735034 [details]
testcase

using peach this is a use after free that was found.  testcase and stacktrace included.
(Reporter)

Comment 1

5 years ago
Created attachment 735036 [details]
stacktrace
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 855174
Group: core-security
You need to log in before you can comment on or make changes to this bug.