213912 - Mozilla crashes when you go to .js-File in chrome://

Status: RESOLVED FIXED

(Core :: Security: CAPS, defect, P1)

Description

[Frank Wein [:mcsmurf]]

Mozilla crashes when you go to a js-File in chrome://. Simply click on URL and
it crashes (also seems to work with nonexisting .js-Files in chrome).

Stacktrace:
nsScriptSecurityManager::CheckSameOriginPrincipalInternal(nsScriptSecurityManager
* const 0x0012f754, nsIPrincipal * 0x027e4b20, nsIPrincipal * 0x00000000, int 0)
line 807 + 9 bytes
nsScriptSecurityManager::CheckSameOriginPrincipal(nsScriptSecurityManager *
const 0x00e9cde8, nsIPrincipal * 0x027e4b20, nsIPrincipal * 0x00000000) line 573
GlobalWindowImpl::SetNewDocument(GlobalWindowImpl * const 0x02495b40,
nsIDOMDocument * 0x02a37114, int 1, int 1) line 436
DocumentViewerImpl::InitInternal(DocumentViewerImpl * const 0x0012f754,
nsIWidget * 0x0268d610, nsIDeviceContext * 0x02a37114, const nsRect & {...}, int
1, int 0) line 872
DocumentViewerImpl::Init(DocumentViewerImpl * const 0x02a374d0, nsIWidget *
0x027501a4, nsIDeviceContext * 0x02449be0, const nsRect & {...}) line 648
nsDocShell::SetupNewViewer(nsDocShell * const 0x02458ac0, nsIContentViewer *
0x02449be0) line 4809 + 51 bytes
nsDocShell::Embed(nsDocShell * const 0x02458ae4, nsIContentViewer * 0x02a374d0,
const char * 0x01a328b8 `string', nsISupports * 0x00000000) line 4143
nsDocShell::CreateContentViewer(nsDocShell * const 0x02a7ea90, const char *
0x0012fbbc, nsIRequest * 0x02a7ea90, nsIStreamListener * * 0x0012fc44) line 4546
+ 18 bytes
nsDSURIContentListener::DoContent(nsDSURIContentListener * const 0x00090000,
const char * 0x0012fbbc, int 0, nsIRequest * 0x02a7ea90, nsIStreamListener * *
0x0012fc44, int * 0x02a7ea90) line 110
nsDocumentOpenInfo::DispatchContent(nsDocumentOpenInfo * const 0x0012f754,
nsIRequest * 0x02a7ea90, nsISupports * 0x0012fbbc) line 418
nsDocumentOpenInfo::OnStartRequest(nsDocumentOpenInfo * const 0x0277f9b0,
nsIRequest * 0x02a7ea90, nsISupports * 0x00000000) line 227 + 14 bytes
nsJARChannel::OnStartRequest(nsJARChannel * const 0x02a7ea98, nsIRequest *
0x02a7ec58, nsISupports * 0x00000000) line 664 + 22 bytes
nsInputStreamPump::OnStateStart(nsInputStreamPump * const 0x0012f754) line 366
nsInputStreamPump::OnInputStreamReady(nsInputStreamPump * const 0x02a7ec5c,
nsIAsyncInputStream * 0x02a7b3a8) line 328
nsInputStreamReadyEvent::EventHandler(PLEvent * 0x02a7ede4) line 117
PL_HandleEvent(PLEvent * 0x02a7ede4) line 672
PL_ProcessPendingEvents(PLEventQueue * 0x1002bb45) line 606 + 6 bytes
_md_EventReceiverProc(HWND__ * 0x01c3ffc0, unsigned int 4202220, unsigned int
15644656, long -2147483648) line 1413
nsAppShellService::Run(nsAppShellService * const 0x00eeb7f0) line 478
main1(int 0, char * * 0x00253de8, nsISupports * 0x00000000) line 1290 + 9 bytes
main(int 1, char * * 0x00253de8) line 1669 + 22 bytes
WinMain(HINSTANCE__ * 0x00400000, HINSTANCE__ * 0x00400000, char * 0x00143839,
HINSTANCE__ * 0x00400000) line 1693 + 23 bytes
MOZILLA! WinMainCRTStartup + 308 bytes
KERNEL32! 77e9847c()

Comment 1

[Christopher Aillon (sabbatical, not receiving bugmail)]

Taking.  I'll look at this later tonight.

Comment 2

[Boris Zbarsky [:bzbarsky]]

*** Bug 213757 has been marked as a duplicate of this bug. ***

Comment 3

[Christopher Aillon (sabbatical, not receiving bugmail)]

Attachment: patch

Checked in with r+sr=bzbarsky

Comment 4

[Christopher Aillon (sabbatical, not receiving bugmail)]

Fixed