[Bug 34982] Multiple web-installers crash in 'get_frame_by_name' with NULL 'HTMLOuterWindow' (Horizon XBOX tool, MAGIX Video Deluxe MX Plus 18)

[wine-bugs at winehq.org]

https://bugs.winehq.org/show_bug.cgi?id=34982

--- Comment #10 from Indrek <efbiaiinzinz at hotmail.com> ---
Bit more digging in the logfile revealed the culprit line in jquery that causes
misbehaviour.

bx = function (a, b) {
  var c, d = a.currentStyle && a.currentStyle[b]..
The first invocation of a.currentStyle before the && sign creates instance of
HTMLCurrentStyle and then releases it (I guess since it is not stored into any
variable), but for some reason, the second part of && ends up using the same
reference to the now-released HTMLCurrentStyle which ends up as segfault,
because nsstyle has been released already.

Either the jscript releases the currentStyle too early or the mshtml
incorrectly reuses the released currentStyle instance, will have to dig a bit
more.

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.