Free 0b9.86a @ microsoftedgecp.exe!edgehtml.dll!COpenElements::Push

Fixed Issue #7868795

Details

Created
Jun 13, 2016
Privacy
This issue is public.
Found in
  • Microsoft Edge
Found in build #
11
Reports
Reported by 1 person

Sign in to watch or report this issue.

Steps to reproduce

Repro.html:

<progress><template>x

This is a use-after-free bug that is mitigated by MemGC; it results in a NULL pointer crash with MemGC enabled.

Attachments

1 attachment

Comments and activity

  • Microsoft Edge Team

    Changed Assigned To to “Ibrahim O.”

    Changed Assigned To to “Travis L.”

    Changed Title from “Free 0b9.86a @ microsoftedgecp.exe!edgehtml.dll!COpenElements::Push” to “Free 0b9.86a @ microsoftedgecp.exe!edgehtml.dll!COpenElements::Push”

    Changed Assigned To from “Travis L.” to “Jeff W.”

    Changed Status to “Confirmed”

    Changed Status from “Confirmed” to “In code review”

    Changed Status from “In code review” to “Fixed”

  • This should be fixed in an upcoming flight.  Thanks for the report!

You need to sign in to your Microsoft account to add a comment.

Sign in