Created attachment 8370324 [details] Faulty session Found by Christoph Diehl's "Faulty" fuzzer, see bug 777067
Note: found while running css-gradients reftests
This ImageContainer contains garbage; don't know what kind of memory corruption that is. Could be use-after-free followed by that memory being reused by something else (the refcount is not 0xa5a5a5a5). Classification: PLayerTransaction, memory corruption, hard.
Fixed by the landing of PLayerTransaction type checks before casting layers, bug 968833.
Assignee: nobody → bjacob
Status: NEW → RESOLVED
Last Resolved: 4 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.