Closed Bug 1301069 Opened 8 years ago Closed 8 years ago

Crash in nsDNSRecord::GetNextAddr

Categories

(Core :: Networking: DNS, defect)

Product:
Core
Component:
Networking: DNS
Platform:
x86
Windows 7
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla51
Tracking Flags:
Tracking Status
firefox-esr45 --- unaffected
firefox50 --- unaffected
firefox51 --- fixed

People

(Reporter: marcia, Assigned: valentin)

References

Details

(4 keywords)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-12114dba-df93-4d4a-b36d-8a6542160907.
=============================================================

Small spike in this signature in the latest nightly, started with 20160906030431 build: http://bit.ly/2cG5BM6

Previous bugs were Bug 1228640 and Bug 1228790. The previous bugs were sec critical so I will hide this for now.
Adding Valentin since he was assigned to the main bug in Comment 0.
according to bug 1228640 comment 3 it was fixed by backing out bug 1183781 but that bug is still marked "FIXED". Was it un-backed-out?
Flags: needinfo?(valentin.gosu)
Keywords: csectype-uaf, sec-high
No, I forgot to reopen it and we just landed bug 1185120 which did pretty much the same thing. It seems to expose and underlying bug. I try my best to get to the bottom of this.
Proceeding to back out bug 1185120.
Assignee: nobody → valentin.gosu
Flags: needinfo?(valentin.gosu)
(In reply to Wes Kocher (:KWierso) from comment #6)
> Merge of the backout https://hg.mozilla.org/mozilla-central/rev/95c87737b9d7

Don't know offhand what that means for the status in this bug.
Flags: needinfo?(valentin.gosu)
Status: NEW → RESOLVED
Closed: 8 years ago
status-firefox51: affected → fixed
Flags: needinfo?(valentin.gosu)
Resolution: --- → FIXED
Target Milestone: --- → mozilla51
(In reply to Valentin Gosu [:valentin] from comment #5)
> https://hg.mozilla.org/integration/mozilla-inbound/rev/
> 9330dc01ec0245f05311c56025a50705138351bc
> Bug 1301069 - Backed out bug 1185120 (changeset 38cad72a77a6) a=backout

landed now on m-c https://hg.mozilla.org/mozilla-central/rev/9330dc01ec02
Group: network-core-security → core-security-release
Keywords: regression
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.