Open
Bug 926593
Opened 12 years ago
Updated 3 years ago
"ASSERTION: Redraw with no canvas element or docshell!" with drawWindow, cycle collection
Categories
(Core :: Graphics, defect)
Tracking
()
NEW
People
(Reporter: jruderman, Unassigned)
Details
(Keywords: assertion, sec-audit, testcase)
Attachments
(2 files)
1. Create a new profile
2. Create prefs.js:
user_pref("gfx.canvas.azure.accelerated", true);
user_pref("gfx.canvas.azure.backends", "skia");
3. Install https://www.squarefree.com/extensions/domFuzzLite3.xpi
4. Load the testcase
###!!! ASSERTION: Redraw with no canvas element or docshell!: 'mDocShell', file content/canvas/src/CanvasRenderingContext2D.cpp, line 687
This assertion was added in bug 651858 part 6 (mozilla-central a8171812fe05).
How scared should I be that forcing cycle collection has an effect?
|
Reporter | |
Comment 1•12 years ago
|
||
|
||
Comment 2•12 years ago
|
||
Looks very much bogus assertion to me.
If the original window has gone or the canvas element, but JS still keeps cx alive...
|
|
Reporter | |
Updated•11 years ago
|
Group: core-security
|
||
Updated•3 years ago
|
Severity: normal → S3
You need to log in
before you can comment on or make changes to this bug.
Description
•