Closed
Bug 967762
Opened 10 years ago
Closed 10 years ago
Faulty crash: null deref in ContainerLayer::RemoveChild called from LayerTransactionParent::RecvUpdate
Categories
(Core :: Graphics, defect)
Tracking
()
RESOLVED
FIXED
mozilla30
People
(Reporter: bjacob, Assigned: bjacob)
References
(Blocks 1 open bug)
Details
Attachments
(1 file)
|
26.74 KB,
text/plain
|
Details |
Found by Christoph Diehl's "Faulty" fuzzer, see bug 777067 This is a variant of bug 967327, living in a different case (different Op) of the same big switch statement.
|
Assignee | |
Comment 1•10 years ago
|
||
Classification: PLayerTransactionParent, missing null check, easy
|
|
Assignee | |
Comment 2•10 years ago
|
||
Fixed by the landing of PLayerTransaction missing null pointer checks (bug 968825).
Assignee: nobody → bjacob
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → FIXED
|
||
Updated•10 years ago
|
Target Milestone: --- → mozilla30
You need to log in
before you can comment on or make changes to this bug.
Description
•