Bug 926690 - Crash in mozilla::DispatchAsyncScrollEventRunnable::Run(), r=khuey
authorOlli Pettay <Olli.Pettay@helsinki.fi>
Wed, 16 Oct 2013 11:42:28 +0300
changeset 164745 a59a7c31965af2165090178b7dda0bf88bd40999
parent 164693 afae5911a1e04d6eb72b231f954fb75806b66d95
child 164746 1ac241025daf6cc231e46d88de0f412b6fac054c
push id3066
push userakeybl@mozilla.com
push dateMon, 09 Dec 2013 19:58:46 +0000
treeherdermozilla-beta@a31a0dce83aa [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewerskhuey
bugs926690
milestone27.0a1
first release with
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 926690 - Crash in mozilla::DispatchAsyncScrollEventRunnable::Run(), r=khuey
dom/browser-element/BrowserElementParent.cpp
--- a/dom/browser-element/BrowserElementParent.cpp
+++ b/dom/browser-element/BrowserElementParent.cpp
@@ -297,16 +297,17 @@ private:
   nsRefPtr<TabParent> mTabParent;
   const CSSRect mContentRect;
   const CSSSize mContentSize;
 };
 
 NS_IMETHODIMP DispatchAsyncScrollEventRunnable::Run()
 {
   nsCOMPtr<Element> frameElement = mTabParent->GetOwnerElement();
+  NS_ENSURE_STATE(frameElement);
   nsIDocument *doc = frameElement->OwnerDoc();
   nsCOMPtr<nsIGlobalObject> globalObject = doc->GetScopeObject();
   NS_ENSURE_TRUE(globalObject, NS_ERROR_UNEXPECTED);
 
   // Create the event's detail object.
   AsyncScrollEventDetail detail;
   detail.mLeft = mContentRect.x;
   detail.mTop = mContentRect.y;