1150617 - Firefox is crashed when http-on-modify-request event changes URI

Status: RESOLVED DUPLICATE of bug 927256

(Firefox :: Untriaged, defect)

Description

[VEG]

Attachment: Simple code that demonstrates the problem

User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:38.0) Gecko/20100101 Firefox/38.0
Build ID: 20150330154247

Steps to reproduce:

1. Install Pure URL https://addons.mozilla.org/ru/firefox/addon/pure-url/

Or install addon with this simple code:

exports.main = function(options, callbacks)
{
	var { Ci } = require('chrome');
	var events = require('sdk/system/events');

	events.on('http-on-modify-request', function(event)
	{
		var channel = event.subject.QueryInterface(Ci.nsIHttpChannel);
		if (channel.URI.path == '/1183559.html?a&utm_campaign=')
		{
			channel.URI.path = '/1183559.html?a';
		}
	}, true);
};

2. Go to http://zyalt.livejournal.com/1183559.html?a&utm_campaign=


Actual results:

Firefox is crashed


Expected results:

This page have to be opened properly

Comment 1

[VEG]

The URL in the previous message isn't a mistake. It have to be exactly http://zyalt.livejournal.com/1183559.html?a&utm_campaign= (with &) if you want to crash Firefox. If you enter http://zyalt.livejournal.com/1183559.html?a&utm_campaign= , Firefox will not be crashed.

Comment 2

[Benjamin Smedberg]

What is the crash report ID?

Comment 3

[VEG]

Report ID: bp-cd2dbebe-d669-4cae-bc10-d863f2150402
https://crash-stats.mozilla.com/report/index/cd2dbebe-d669-4cae-bc10-d863f2150402