385445 - [1.8 branch] Crash [@ nsIFrame::HasView] from [@ imgContainerGIF::Notify]

Status: RESOLVED WONTFIX

(Core :: Layout: Images, Video, and HTML Frames, defect)

Description

[Mats Palmgren (inactive)]

Crash [@ nsIFrame::HasView] from [@ imgContainerGIF::Notify]

Spawned off from bug 369971.

STEPS TO REPRODUCE
1. load URL in a 1.8 branch build
2. start "Random Classes 2.0" fuzzer (bug 331889) with default args

It appears to work in a trunk build, didn't test 1.8.0

Comment 1

[Mats Palmgren (inactive)]

Attachment: stack, 1.8 branch MacOSX

Comment 2

[Damon Sicore (:damons)]

Noming this as it doesn't appear on any blocking list and it's sg:crit?

Comment 3

[Robert O'Callahan (:roc) (email my personal email if necessary)]

Why was this nominated for blocking 1.9 when it doesn't crash 1.9? Anyway, we're not blocking on this even if it does crash 1.9.

Comment 4

[Damon Sicore (:damons)]

Sorry, Roc.  Missed that.

Comment 5

[Mats Palmgren (inactive)]

My 1.8 branch build on MacOSX is non-functional.

Comment 6

[Martijn Wargers (dead)]

I suggest marking this bug worksforme or wontfix.

Comment 7

[Jesse Ruderman]

We should probably do that for all the 1.8 sg:crit bugs at once.

https://bugzilla.mozilla.org/buglist.cgi?bug_id=335210,371370,372517,385445,394643,405156,422338,441646

Comment 8

[Daniel Veditz [:dveditz] out until Nov 10]

At what point? We still support Thunderbird 2 on the 1.8 branch, isn't it too early to close the book on them?

Comment 9

[Mike Shaver (:shaver emeritus)]

Well, I don't think we're going to fix a bug that only affects tbird 2.0.x, for which there isn't a testcase other than the fuzzer, to be honest.