Bug 644084 - crash [@ nsAccessNodeWrap::get_attributesForNames(unsigned short, unsigned short**, short*, unsigned short**)], r=marcoz, a=blocking2.x+

accessible/src/msaa/nsAccessNodeWrap.cpp

@@ -308,7 +308,7 @@ STDMETHODIMP nsAccessNodeWrap::get_attributesForNames(
     /* [length_is][size_is][retval] */ BSTR __RPC_FAR *aAttribValues)
 {
 __try {
-  if (IsDefunct() || IsDocument())
+  if (IsDefunct() || !IsElement())
     return E_FAIL;
 
   nsCOMPtr<nsIDOMElement> domElement(do_QueryInterface(mContent));