Closed
Bug 427691
Opened 17 years ago
Closed 17 years ago
"ASSERTION: Bad count" adding script during mutation event
Categories
(Core :: DOM: Core & HTML, defect, P1)
Tracking
()
RESOLVED
WORKSFORME
People
(Reporter: jruderman, Assigned: sicking)
References
Details
(Keywords: assertion, regression, testcase)
Attachments
(2 files)
Loading the testcase triggers:
###!!! ASSERTION: Bad count: 'lastBlocker == sBlockedScriptRunners->Count() && sRunnersCountAtFirstBlocker == 0', file /Users/jruderman/trunk/mozilla/content/base/src/nsContentUtils.cpp, line 4027
Then, shutting down Firefox triggers:
###!!! ASSERTION: How'd this happen?: '!sBlockedScriptRunners || sBlockedScriptRunners->Count() == 0', file /Users/jruderman/trunk/mozilla/content/base/src/nsContentUtils.cpp, line 831
This happens both without and with the patch in bug 423355 comment 39.
I'm filing this as security-sensitive out of caution, since the assertion involves code added in bug 423355, which is security-sensitive.
Flags: blocking1.9?
|
Reporter | |
Comment 1•17 years ago
|
||
|
|
Reporter | |
Comment 2•17 years ago
|
||
> I'm filing this as security-sensitive out of caution, since the assertion
> involves code added in bug 423355, which is security-sensitive.
I meant bug 401155.
|
||
Comment 3•17 years ago
|
||
Why should this block 1.9 in particular? Could we take this in a dot release?
re-nom if necessary.
Flags: wanted1.9.0.x+
Flags: blocking1.9?
Flags: blocking1.9-
|
||
Comment 4•17 years ago
|
||
It's a recent regression of a security-related invariant. Jonas needs to decide whether the reason the assertion is firing is bad enough to need fixing in 1.9.0, basically... That evaluation we should definitely block on.
Flags: blocking1.9- → blocking1.9?
|
Assignee | |
Comment 6•17 years ago
|
||
This sounds like it's a really scary state, but it's something we can fix in a dot-release.
Assignee: nobody → jonas
Flags: blocking1.9+ → blocking1.9-
Priority: -- → P1
|
|
Assignee | |
Comment 7•17 years ago
|
||
I'm unable to reproduce this on windows. Mac-only or fixed?
|
|
Reporter | |
Updated•17 years ago
|
Status: NEW → RESOLVED
Closed: 17 years ago
Resolution: --- → WORKSFORME
|
||
Updated•16 years ago
|
Flags: wanted1.9.0.x-
Flags: wanted1.9.0.x+
Flags: wanted1.8.1.x?
|
||
Updated•9 years ago
|
Group: core-security → core-security-release
|
|
||
Updated•9 years ago
|
Group: core-security-release
|
||
Updated•6 years ago
|
Component: DOM → DOM: Core & HTML
You need to log in
before you can comment on or make changes to this bug.
Description
•