Closed
Bug 1098145
Opened 10 years ago
Closed 10 years ago
[BrowserAPI] iframe.download crash in Assertion failure: compartment_ (Caller needs to enter a compartment first)
Categories
(Core :: DOM: Core & HTML, defect)
Core
DOM: Core & HTML
Tracking
()
RESOLVED
FIXED
mozilla36
People
(Reporter: kanru, Assigned: kanru)
References
(Depends on 1 open bug)
Details
Attachments
(1 file, 1 obsolete file)
|
(deleted),
patch
|
smaug
:
review+
|
Details | Diff | Splinter Review |
Program received signal SIGSEGV, Segmentation fault.
0x00007ffff3d567e4 in js::NewObjectWithClassProtoCommon(js::ExclusiveContext*, js::Class const*, JSObject*, JSObject*, js::gc::AllocKind, js::NewObjectKind) ()
from /home/kanru/mozilla/B2G/gaia/b2g/libxul.so
#0 0x00007ffff3d567e4 in js::NewObjectWithClassProtoCommon(js::ExclusiveContext*, js::Class const*, JSObject*, JSObject*, js::gc::AllocKind, js::NewObjectKind) () from /home/kanru/mozilla/B2G/gaia/b2g/libxul.so
#1 0x00007ffff2afa7b8 in mozilla::dom::BrowserElementDownloadOptions::ToObjectInternal(JSContext*, JS::MutableHandle<JS::Value>) const ()
from /home/kanru/mozilla/B2G/gaia/b2g/libxul.so
#2 0x00007ffff2f602f9 in mozilla::nsBrowserElement::Download(nsAString_internal const&, mozilla::dom::BrowserElementDownloadOptions const&, mozilla::ErrorResult&) () from /home/kanru/mozilla/B2G/gaia/b2g/libxul.so
#3 0x00007ffff2c32cb9 in mozilla::dom::HTMLIFrameElementBinding::download(JSContext*, JS::Handle<JSObject*>, mozilla::dom::HTMLIFrameElement*, JSJitMethodCallArgs const&) () from /home/kanru/mozilla/B2G/gaia/b2g/libxul.so
#4 0x00007ffff2e6c2ee in mozilla::dom::GenericBindingMethod(JSContext*, unsigned int, JS::Value*) () from /home/kanru/mozilla/B2G/gaia/b2g/libxul.so
|
Assignee | |
Comment 1•10 years ago
|
||
|
|
Assignee | |
Comment 2•10 years ago
|
||
|
|
Assignee | |
Comment 3•10 years ago
|
||
Attachment #8522104 -
Flags: review?(bugs)
|
||
Comment 4•10 years ago
|
||
You should pass the JSObject to init()
|
|
Assignee | |
Comment 5•10 years ago
|
||
Attachment #8522104 -
Attachment is obsolete: true
Attachment #8522104 -
Flags: review?(bugs)
Attachment #8522142 -
Flags: review?(bugs)
|
|
||
Updated•10 years ago
|
Attachment #8522142 -
Flags: review?(bugs) → review+
|
|
Assignee | |
Comment 6•10 years ago
|
||
|
||
Comment 7•10 years ago
|
||
Assignee: nobody → kanru
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla36
Backed out in https://hg.mozilla.org/mozilla-central/rev/1f1fba261deb so I could cleanly back out bug 1044736.
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
Status: REOPENED → RESOLVED
Closed: 10 years ago → 10 years ago
Resolution: --- → FIXED
|
||
Updated•6 years ago
|
Component: DOM → DOM: Core & HTML
You need to log in
before you can comment on or make changes to this bug.
Description
•