Bug 374069 - Crash [@ nsContentUtils::ComparePoints] with testcase, when right-clicking, r=mscott, a=dbaron

extensions/spellcheck/src/mozInlineSpellChecker.cpp

@@ -786,6 +786,7 @@ NS_IMETHODIMP
 mozInlineSpellChecker::GetMispelledWord(nsIDOMNode *aNode, PRInt32 aOffset,
                                         nsIDOMRange **newword)
 {
+  NS_ENSURE_ARG_POINTER(aNode);
   nsCOMPtr<nsISelection> spellCheckSelection;
   nsresult res = GetSpellCheckSelection(getter_AddRefs(spellCheckSelection));
   NS_ENSURE_SUCCESS(res, res); 

toolkit/content/inlineSpellCheckUI.js

@@ -81,7 +81,7 @@ var InlineSpellCheckerUI = {
   {
     this.mOverMisspelling = false;
 
-    if (! this.mInlineSpellChecker)
+    if (!rangeParent || !this.mInlineSpellChecker)
       return;
 
     var selcon = this.mEditor.selectionController;