Crash in nsDNSRecord::GetNextAddr

RESOLVED FIXED in Firefox 51

Status

()

--
critical
RESOLVED FIXED
3 years ago
2 years ago

People

(Reporter: marcia, Assigned: valentin)

Tracking

(4 keywords)

Trunk
mozilla51
x86
Windows 7
crash, csectype-uaf, regression, sec-high
Points:
---

Firefox Tracking Flags

(firefox-esr45 unaffected, firefox50 unaffected, firefox51 fixed)

Details

(crash signature)

This bug was filed from the Socorro interface and is 
report bp-12114dba-df93-4d4a-b36d-8a6542160907.
=============================================================

Small spike in this signature in the latest nightly, started with 20160906030431 build: http://bit.ly/2cG5BM6

Previous bugs were Bug 1228640 and Bug 1228790. The previous bugs were sec critical so I will hide this for now.
Adding Valentin since he was assigned to the main bug in Comment 0.
according to bug 1228640 comment 3 it was fixed by backing out bug 1183781 but that bug is still marked "FIXED". Was it un-backed-out?
Flags: needinfo?(valentin.gosu)
Keywords: csectype-uaf, sec-high
(Assignee)

Comment 3

3 years ago
No, I forgot to reopen it and we just landed bug 1185120 which did pretty much the same thing. It seems to expose and underlying bug. I try my best to get to the bottom of this.
Proceeding to back out bug 1185120.
Assignee: nobody → valentin.gosu
Flags: needinfo?(valentin.gosu)
(Assignee)

Updated

3 years ago
Duplicate of this bug: 1301180
(In reply to Wes Kocher (:KWierso) from comment #6)
> Merge of the backout https://hg.mozilla.org/mozilla-central/rev/95c87737b9d7

Don't know offhand what that means for the status in this bug.
Flags: needinfo?(valentin.gosu)
Status: NEW → RESOLVED
Last Resolved: 3 years ago
status-firefox51: affected → fixed
Flags: needinfo?(valentin.gosu)
Resolution: --- → FIXED
Target Milestone: --- → mozilla51
(In reply to Valentin Gosu [:valentin] from comment #5)
> https://hg.mozilla.org/integration/mozilla-inbound/rev/
> 9330dc01ec0245f05311c56025a50705138351bc
> Bug 1301069 - Backed out bug 1185120 (changeset 38cad72a77a6) a=backout

landed now on m-c https://hg.mozilla.org/mozilla-central/rev/9330dc01ec02
status-firefox50: --- → unaffected
status-firefox-esr45: --- → unaffected
Group: network-core-security → core-security-release
Keywords: regression
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.