Closed Bug 1304597 Opened 3 years ago Closed 3 years ago

Crash in InvalidArrayIndex_CRASH | mozilla::MediaEngineCameraVideoSource::GetCapability

Categories

(Core :: Audio/Video, defect, critical)

x86
Windows 7
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 1298107

People

(Reporter: njn, Unassigned)

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-050e7850-0a2c-4c31-a246-641392160921.
=============================================================

An nsTArray bounds check failure crash. 14 occurrences across 9 installations in the past 7 days. All in Firefox 50.0a2, which is the first version in which the bounds checking was implemented. The array lengths are in the range 1..7, and in every case we read one element past the end.

jib, can you please investigate?
Flags: needinfo?(jib)
Group: media-core-security
Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 1298107
Flags: needinfo?(jib)
For anybody doing archeology, the patch from bug 1298107 ended up landing under this bug number.
Group: media-core-security
You need to log in before you can comment on or make changes to this bug.