Closed Bug 1214495 Opened 9 years ago Closed 9 years ago

Move CallerSubsumes checks in nsLocation into the WebIDL entry points

Categories

(Core :: DOM: Core & HTML, defect)

defect
Not set
normal

Tracking

()

RESOLVED FIXED
mozilla44
Tracking Status
firefox43 --- unaffected
firefox44 + fixed

People

(Reporter: bholley, Assigned: bholley)

References

Details

Attachments

(2 files)

Flags: needinfo?(bobbyholley)
The crashes reported in bug 1214877 just recently appeared in 44 (both Firefox and Thunderbird). 

Looks like it first showed up in builds 2015092603 and 2015101303. It is often a startup crash. 

More reports: https://crash-stats.mozilla.com/report/list?product=Firefox&signature=nsContentUtils%3A%3ASubjectPrincipal%28%29#tab-sigsummary

Crashing thread:

0 	xul.dll 	nsContentUtils::SubjectPrincipal() 	dom/base/nsContentUtils.cpp
1 	xul.dll 	nsLocation::CallerSubsumes() 	dom/base/nsLocation.cpp
2 	xul.dll 	nsLocation::GetHref(nsAString_internal&) 	dom/base/nsLocation.cpp
3 	xul.dll 	nsNativeAppSupportWin::HandleDDENotification(unsigned int, unsigned int, HCONV__*, HSZ__*, HSZ__*, HDDEDATA__*, unsigned __int64, unsigned __int64) 	toolkit/xre/nsNativeAppSupportWin.cpp
4 	user32.dll 	DoCallback 	
5 	xul.dll 	xul.dll@0x1c1590f 	
6 	user32.dll 	SvSpontRequest 	
7 	ntdll.dll 	RtlActivateActivationContextUnsafeFast 	
8 	user32.dll 	ProcessSyncDDEMessage 	
9 	user32.dll 	DDEMLClientWndProc 	
10 	user32.dll 	ProcessAsyncDDEMsg 	
11 	xul.dll 	nsWindow::WindowProc(HWND__*, unsigned int, unsigned __int64, __int64) 	widget/windows/nsWindow.cpp
Attached patch Bonus fix. v1Splinter Review
This should have been done in bug 839867.
Attachment #8673905 - Flags: review?(bzbarsky)
Comment on attachment 8673904 [details] [diff] [review]
Move CallerSubsumes checks in nsLocation into the WebIDL entry points. v1

r=me
Attachment #8673904 - Flags: review?(bzbarsky) → review+
Comment on attachment 8673905 [details] [diff] [review]
Bonus fix. v1

r=me
Attachment #8673905 - Flags: review?(bzbarsky) → review+
https://hg.mozilla.org/mozilla-central/rev/6d1f265f7a72
https://hg.mozilla.org/mozilla-central/rev/ce5af026e369
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla44
Component: DOM → DOM: Core & HTML
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: