1332589 - Clicking link from about:sync-log causes blank page, hang

Status: RESOLVED DUPLICATE of bug 1329032

(Core :: DOM: Security, defect)

Description

[Haik Aftandilian [:haik]]

After the fix for bug 1182569, I noticed a problem where after loading about:sync-log, clicking on the file:// link "Up to higher level directory" causes a hang. Christoph, shall I file a new bug or will that be covered by this one? If you have an updated patch, I could give it a try. The patch from comment 5 didn't apply cleanly for me.

Note: On Mac, to test the fix for this, you'll need to set security.sandbox.content.level=1. Using level=2 prevents the content process from being able to read. And level=2 is limited to Nightly for now.

Mozregression conclusion:

13:43.96 INFO: Oh noes, no (more) inbound revisions :(
13:43.96 INFO: Last good revision: 9307d60e21ba70f46fb47c9eb43b6b5246b7e64c
13:43.96 INFO: First bad revision: d31df518cb6ec920cf9ab7accb67682298f8a9f8
13:43.96 INFO: Pushlog:
https://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=9307d60e21ba70f46fb47c9eb43b6b5246b7e64c&tochange=d31df518cb6ec920cf9ab7accb67682298f8a9f8

Comment 1

[Haik Aftandilian [:haik]]

Apologies for the confusing lack of context in the bug description. The description was pasted from bug 1331686 https://bugzilla.mozilla.org/show_bug.cgi?id=1331686#c7 which is a related problem.

Comment 2

[:Gijs (out for now; he/him)]

Does this reproduce with the separate process for file:/// turned off?

Comment 3

[:Gijs (out for now; he/him)]

Also looping in Mark and Kit because this affects sync things.

Comment 4

[Haik Aftandilian [:haik]]

(In reply to :Gijs from comment #2)
> Does this reproduce with the separate process for file:/// turned off?

Yes, still reproducible. (I set browser.tabs.remote.separateFileUriProcess to false and restarted. Confirmed on Mac and Windows).

Comment 5

[Lina Butler [:lina]]

Thanks for filing this! Looks like a dupe of bug 1329032. Are you still able to reproduce in the latest Nightly?

Comment 6

[Haik Aftandilian [:haik]]

(In reply to Kit Cambridge [:kitcambridge] from comment #5)
> Thanks for filing this! Looks like a dupe of bug 1329032. Are you still able
> to reproduce in the latest Nightly?

Yes, it does appear to be fixed for me with the latest Nightly. I tested on Windows and on Mac (with security.sandbox.content.level set to 1.) Thanks.

  $ hg parent
  changeset:   330298:3cedab21a7e6
  user:        Carsten "Tomcat" Book <[e-mail]>
  date:        Fri Jan 20 15:25:25 2017 +0100
  description:
  merge mozilla-inbound to mozilla-central a=merge

Comment 8

[Boris Zbarsky [:bzbarsky]]

Note that this was basically a duplicate of bug 1329883, as far as I can tell...