### ESR Uplift Approval Request * **If this is not a sec:{high,crit} bug, please state case for ESR consideration**: DoS: Webpage (e.g. login page) can trivially crash Thunderbird at will. Causes a top crash in TB 78 right now. * **User impact if declined**: Thunderbird crashes as soon as the user tries to login to their email address. * **Fix Landed on Version**: 91 * **Risk to taking this patch**: Low * **Why is the change risky/not risky? (and alternatives if risky)**: This is simply moving an assertion. This assertion is causing the crash. It was misplaced, due to wrong and hardcoded assumptions. This is just moving the assertion one block lower. * **String or UUID changes made by this patch**: none
Bug 1717833 Comment 11 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
### ESR Uplift Approval Request * **If this is not a sec:{high,crit} bug, please state case for ESR consideration**: DoS: Webpage (e.g. login page) can trivially crash Thunderbird at will, or accidentally, by registering handlers for "mailto" or similar schemes. Apparently, some mail login pages do that. Causes a top crash in TB 78 right now. * **User impact if declined**: Thunderbird crashes as soon as the user tries to login to their email address. * **Fix Landed on Version**: 91 * **Risk to taking this patch**: Low * **Why is the change risky/not risky? (and alternatives if risky)**: This is simply moving an assertion. This assertion is causing the crash. It was misplaced, due to wrong and hardcoded assumptions. This is just moving the assertion one block lower. * **String or UUID changes made by this patch**: none
### ESR Uplift Approval Request * **If this is not a sec:{high,crit} bug, please state case for ESR consideration**: DoS: Webpage (e.g. login page) can trivially crash Thunderbird at will, or accidentally, by registering handlers for "mailto" or similar schemes. Apparently, some mail login pages do that. Causes a top crash in TB 78 right now. * **User impact if declined**: Thunderbird crashes as soon as the user tries to login to their email address. * **Fix Landed on Version**: 91 * **Risk to taking this patch**: Low * **Why is the change risky/not risky? (and alternatives if risky)**: This is simply moving an assertion a few code lines. This assertion is causing the crash. It was misplaced, due to wrong and hardcoded assumptions. * **String or UUID changes made by this patch**: none
### ESR Uplift Approval Request * **If this is not a sec:{high,crit} bug, please state case for ESR consideration**: DoS: Webpage (e.g. login page) can trivially crash Thunderbird at will, or accidentally, by registering handlers for "mailto" or similar schemes. Apparently, some mail login pages do that. Causes a top crash in TB 78 right now. * **User impact if declined**: Thunderbird crashes as soon as the user tries to login to their email address. * **Fix Landed on Version**: 91 * **Risk to taking this patch**: Low * **Why is the change risky/not risky? (and alternatives if risky)**: This crash is cased by a misplaced, due to wrong and hardcoded assumptions. This is simply moving an assertion a few code lines. * **String or UUID changes made by this patch**: none
### ESR Uplift Approval Request * **If this is not a sec:{high,crit} bug, please state case for ESR consideration**: DoS: Webpage (e.g. login page) can trivially crash Thunderbird at will, or accidentally, by registering handlers for "mailto" or similar schemes. Apparently, some mail login pages do that. Causes a top crash in TB 78 right now. * **User impact if declined**: Thunderbird crashes as soon as the user tries to login to their email address. * **Fix Landed on Version**: 91 * **Risk to taking this patch**: Very low * **Why is the change risky/not risky? (and alternatives if risky)**: This crash is caused by a misplaced assertion, due to hardcoded assumptions. This is simply moving an assertion a few code lines. * **String or UUID changes made by this patch**: none