firefox crashed with nsScriptSecurityManager::CheckPropertyAccessImpl
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
firefox-3.5 (Ubuntu) |
New
|
Undecided
|
Unassigned |
Bug Description
Binary package hint: firefox-3.5
Probably this crash is closely related to bug #428888 but as the backtrace differs quite I'm submitting as different bug.
This time firefox greyed out and shortly after crashed while browsing lauchpad. Again,as in bug #428888, another window was open with a java applet running in it.
I haven't found yet a reproducible test case.
My system is karmic updated;
hmontoliu@
Release: 9.10
Codename: karmic
hmontoliu@
firefox:
Installed: 3.5.3+build1+
Candidate: 3.5.3+build1+
Version table:
*** 3.5.3+build1+
500 http://
100 /var/lib/
The first significant fields of the backtrace (attached) are:
#0 nsScriptSecurit
#0 nsScriptSecurit
#1 nsScriptSecurit
#2 nsScriptSecurit
#3 js_InternalGetOrSet (cx=0xb182c400, obj=0xb188f480,
#4 js_GetSprop (cx=0xb182c400, obj=0xb188f480, pobj=0xb188f4a0,
#5 js_NativeGet (cx=0xb182c400, obj=0xb188f480, pobj=0xb188f4a0,
#6 js_Interpret (cx=0xb182c400) at jsinterp.cpp:4436
#7 js_Invoke (cx=0xb182c400, argc=0, vp=0xa910d740, flags=0)
#8 js_InternalInvoke (cx=0xb182c400, obj=0xb188f480,
#9 js_InternalGetOrSet (cx=0xb182c400, obj=0xb188f480,
#10 js_GetSprop (cx=0xb182c400, obj=0xb188f480, pobj=0xb188f4a0,
#11 js_NativeGet (cx=0xb182c400, obj=0xb188f480, pobj=0xb188f4a0,
#12 js_GetPropertyH
#13 js_Interpret (cx=0xb182c400) at jsinterp.cpp:4449