From d34aa2d18bee1d44ae60998fde9c5ac9198b3983 Mon Sep 17 00:00:00 2001 From: Sean Feng Date: Thu, 17 Aug 2023 18:22:57 +0000 Subject: [PATCH] Bug 1840191 - Fix a crash where nsContentSink::DidBuildModelImpl gets called with incorrect state r=hsivonen,dom-core The autofocus algorithm made this noticeable because we now can run scripts at an earlier time. Differential Revision: https://phabricator.services.mozilla.com/D182734 --- dom/base/crashtests/1840191.html | 68 +++++++++++++++++++++++++++++ dom/base/crashtests/crashtests.list | 1 + dom/base/nsContentSink.cpp | 2 +- parser/html/nsHtml5Parser.cpp | 3 ++ parser/html/nsHtml5Parser.h | 6 +++ parser/htmlparser/nsParserBase.h | 1 + 6 files changed, 80 insertions(+), 1 deletion(-) create mode 100644 dom/base/crashtests/1840191.html diff --git a/dom/base/crashtests/1840191.html b/dom/base/crashtests/1840191.html new file mode 100644 index 000000000000..5c3c7f6c32db --- /dev/null +++ b/dom/base/crashtests/1840191.html @@ -0,0 +1,68 @@ + + + + + + + + +
+ +
+ +

+
+ + +
+ +
+ + + +

+
+
+
+

+

+
+

+

+

+
+
+
+
+
+
+
+
+