Closed Bug 1255888 Opened 8 years ago Closed 8 years ago

crash in txStylesheetCompilerState::loadImportedStylesheet when using Alpheios Extensions

Categories

(Core :: DOM: Security, defect)

Product:
Core
Component:
DOM: Security
Version:
44 Branch
Platform:
x86_64
Windows 7
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1249572
Tracking Flags:
Tracking Status
firefox45 --- fixed
firefox46 - fixed
firefox47 - fixed
firefox48 - fixed

People

(Reporter: epinal99-bugzilla2, Assigned: ckerschb)

References

Details

(Keywords: crash, regression, reproducible)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-c30fb115-3923-4c5b-b538-ba9eb2160311.
=============================================================

Bug reported on SUMO: https://support.mozilla.org/en-US/questions/1113825

STR:
1) Install Alpheios Extensions (http://alpheios.net/content/installation) in this order:
1.1) Alpheios Basic Libraries
https://addons.mozilla.org/en-US/firefox/addon/alpheios-basic-libraries/
1.2) Alpheios Latin Tools
https://addons.mozilla.org/en-US/firefox/addon/alpheios-latin-tools/

On the Alpheios add-on bar:
2) Select "Toggle Alpheios On" by clicking on the "Alpheios" button
3) Enter a random Latin word in the search field like "rosa"

Result: instant crash

CR FF45:
https://crash-stats.mozilla.com/report/index/b29ca27e-8256-463f-8a1f-6ca922160311
https://crash-stats.mozilla.com/report/index/c30fb115-3923-4c5b-b538-ba9eb2160311

Regression range:
https://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=9a8f2342fb3116d23989087e026448d38a3768c5&tochange=5430b2dba98b2a39ccdfd3700131f780a27be17c

Christoph Kerschbaumer — Bug 1191645 - Use channel->asycnOpen2 in dom/base/nsSyncLoadService.cpp. r=sicking
Blocks: 1191645
Crash Signature: [@ txStylesheetCompilerState::loadImportedStylesheet] → [@ txStylesheetCompilerState::loadImportedStylesheet] [@ txStylesheetCompilerState::loadIncludedStylesheet ]
status-firefox45: --- → affected
status-firefox46: --- → affected
status-firefox47: --- → affected
status-firefox48: --- → affected
tracking-firefox46: --- → ?
tracking-firefox47: --- → ?
tracking-firefox48: --- → ?
Flags: needinfo?(mozilla)
Keywords: regression, reproducible
OS: Windows NT → Windows 7
Hardware: x86 → x86_64
I'll have a look ASAP - leaving ni?.
Moving this off the unassigned regressions list.
Assignee: nobody → mozilla
Status: NEW → ASSIGNED
Has Regression Range: --- → yes
Has STR: --- → yes
This seems relevant here:
https://bugzilla.mozilla.org/show_bug.cgi?id=1222624#c15

Also adding peterv who is working on Bug 1222624.
Flags: needinfo?(mozilla)
Closing for now since Bug 1222624 is also security sensitive. I suppose this bug is even a duplicate and the reason why Bug 1222624 got backed out.
Group: core-security-release
Peterv, can we mark this as a dup?
Flags: needinfo?(peterv)
Probably (but of bug 1249572), but someone should check that that backout did fix this.
Flags: needinfo?(peterv)
Yes, I confirm it's fixed after the backout of Bug 1222624 (done in bug 1249572) with the latest Nightly 20160316030233.
(In reply to Loic from comment #7)
> Yes, I confirm it's fixed after the backout of Bug 1222624 (done in bug
> 1249572) with the latest Nightly 20160316030233.

Thanks Loic for testing.

In that case I will close this one as a duplicate of Bug 1222624.
Status: ASSIGNED → RESOLVED
Closed: 8 years ago
Resolution: --- → DUPLICATE
Sounds like this is fixed and there is nothing left to track in the duplicate bug.
status-firefox45: affected → fixed
status-firefox46: affected → fixed
status-firefox47: affected → fixed
status-firefox48: affected → fixed
tracking-firefox46: ? → -
tracking-firefox47: ? → -
tracking-firefox48: ? → -
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.