Bug 1717833 Comment 11 Edit History

Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.

### ESR Uplift Approval Request
* **If this is not a sec:{high,crit} bug, please state case for ESR consideration**: DoS: Webpage (e.g. login page) can trivially crash Thunderbird at will. Causes a top crash in TB 78 right now.
* **User impact if declined**: Thunderbird crashes as soon as the user tries to login to their email address.
* **Fix Landed on Version**: 91
* **Risk to taking this patch**: Low
* **Why is the change risky/not risky? (and alternatives if risky)**: This is simply moving an assertion. This assertion is causing the crash. It was misplaced, due to wrong and hardcoded assumptions. This is just moving the assertion one block lower.
* **String or UUID changes made by this patch**: none
### ESR Uplift Approval Request
* **If this is not a sec:{high,crit} bug, please state case for ESR consideration**: DoS: Webpage (e.g. login page) can trivially crash Thunderbird at will, or accidentally, by registering handlers for "mailto" or similar schemes. Apparently, some mail login pages do that. Causes a top crash in TB 78 right now.
* **User impact if declined**: Thunderbird crashes as soon as the user tries to login to their email address.
* **Fix Landed on Version**: 91
* **Risk to taking this patch**: Low
* **Why is the change risky/not risky? (and alternatives if risky)**: This is simply moving an assertion. This assertion is causing the crash. It was misplaced, due to wrong and hardcoded assumptions. This is just moving the assertion one block lower.
* **String or UUID changes made by this patch**: none
### ESR Uplift Approval Request
* **If this is not a sec:{high,crit} bug, please state case for ESR consideration**: DoS: Webpage (e.g. login page) can trivially crash Thunderbird at will, or accidentally, by registering handlers for "mailto" or similar schemes. Apparently, some mail login pages do that. Causes a top crash in TB 78 right now.
* **User impact if declined**: Thunderbird crashes as soon as the user tries to login to their email address.
* **Fix Landed on Version**: 91
* **Risk to taking this patch**: Low
* **Why is the change risky/not risky? (and alternatives if risky)**: This is simply moving an assertion a few code lines. This assertion is causing the crash. It was misplaced, due to wrong and hardcoded assumptions.
* **String or UUID changes made by this patch**: none
### ESR Uplift Approval Request
* **If this is not a sec:{high,crit} bug, please state case for ESR consideration**: DoS: Webpage (e.g. login page) can trivially crash Thunderbird at will, or accidentally, by registering handlers for "mailto" or similar schemes. Apparently, some mail login pages do that. Causes a top crash in TB 78 right now.
* **User impact if declined**: Thunderbird crashes as soon as the user tries to login to their email address.
* **Fix Landed on Version**: 91
* **Risk to taking this patch**: Low
* **Why is the change risky/not risky? (and alternatives if risky)**: This crash is cased by a misplaced, due to wrong and hardcoded assumptions. This is simply moving an assertion a few code lines. 
* **String or UUID changes made by this patch**: none
### ESR Uplift Approval Request
* **If this is not a sec:{high,crit} bug, please state case for ESR consideration**: DoS: Webpage (e.g. login page) can trivially crash Thunderbird at will, or accidentally, by registering handlers for "mailto" or similar schemes. Apparently, some mail login pages do that. Causes a top crash in TB 78 right now.
* **User impact if declined**: Thunderbird crashes as soon as the user tries to login to their email address.
* **Fix Landed on Version**: 91
* **Risk to taking this patch**: Very low
* **Why is the change risky/not risky? (and alternatives if risky)**: This crash is caused by a misplaced assertion, due to hardcoded assumptions. This is simply moving an assertion a few code lines.
* **String or UUID changes made by this patch**: none

Back to Bug 1717833 Comment 11