AV - Another NULL pointer in microsoftedgecp.exe!edgehtml.dll!Tree։։ANode։։Parent

Confirmed Issue #8162255 • Assigned to Shuo D.

Details

Created
Jul 13, 2016
Privacy
This issue is public.
Found in
  • Microsoft Edge
Reports
Reported by 1 person

Sign in to watch or report this issue.

Steps to reproduce

Crash in same function as https://developer.microsoft.com/en-us/microsoft-edge/platform/issues/8162240/, but with different call stack.

Repro.html:
<style>*:first-letter{color:red</style><body onload=d=document;d.designMode="on";d.execCommand(“JustifyFull”)>

Attachments

1 attachment

Comments and activity

  • Microsoft Edge Team

    Changed Assigned To to “Travis L.”

    Changed Title from “Another NULL pointer in microsoftedgecp.exe!edgehtml.dll!Tree։։ANode։։Parent” to “AV - Another NULL pointer in microsoftedgecp.exe!edgehtml.dll!Tree։։ANode։։Parent”

    Changed Assigned To from “Travis L.” to “Shuo D.”

    Changed Status to “Confirmed”

  • FYI: disabling MemGC turns this into a use-after-free

You need to sign in to your Microsoft account to add a comment.

Sign in