Closed Bug 1361706 Opened 7 years ago Closed 7 years ago

Crash in objc_msgSend | -[NSKeyBindingManager interpretEventAsCommand:forClient:]

Categories

(Core :: Widget: Cocoa, defect)

53 Branch
x86_64
macOS
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 1361432
Tracking Status
firefox-esr52 --- wontfix
firefox53 --- wontfix
firefox54 --- wontfix
firefox55 --- wontfix

People

(Reporter: philipp, Unassigned)

Details

(Keywords: crash, csectype-uaf, testcase-wanted)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-2a129bd9-8655-4934-a5da-138c80170428.
=============================================================

this crash signature is significantly on the increase in the past two weeks. correlations show that all the reports are coming from users on macOS 10.12.4 16E195.
many comments talk about uploading files at the time when the crash happened: 
https://crash-stats.mozilla.com/signature/?signature=objc_msgSend%20|%20-[NSKeyBindingManager%20interpretEventAsCommand%3AforClient%3A]&date=%3E%3D2017-04-01T00%3A00%3A00.000Z#comments

Correlations for Firefox Release
(100.0% in signature vs 00.26% overall) address = 0xffffffffe5e5e5f8
(100.0% in signature vs 02.32% overall) reason = EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
(98.06% in signature vs 00.36% overall) Module "MediaServices" = true [98.06% vs 23.73% if platform_version = 10.12.4 16E195]
(98.06% in signature vs 00.36% overall) Module "MediaRemote" = true [98.06% vs 23.73% if platform_version = 10.12.4 16E195]
(98.06% in signature vs 00.48% overall) Module "iLifeMediaBrowser" = true [98.06% vs 23.73% if platform_version = 10.12.4 16E195]
(98.06% in signature vs 00.48% overall) Module "AVKit" = true [98.06% vs 23.73% if platform_version = 10.12.4 16E195]
(100.0% in signature vs 00.89% overall) Module "Suggestions" = true [100.0% vs 30.66% if platform_version = 10.12.4 16E195]
(100.0% in signature vs 00.75% overall) Module "PlugInKit" = true [100.0% vs 30.66% if platform_version = 10.12.4 16E195]
(100.0% in signature vs 00.89% overall) Module "FinderKit" = true [100.0% vs 30.66% if platform_version = 10.12.4 16E195]
(100.0% in signature vs 00.74% overall) Module "CacheDelete" = true [100.0% vs 30.66% if platform_version = 10.12.4 16E195]
(100.0% in signature vs 01.51% overall) Module "Bom" = true [100.0% vs 40.98% if platform = Mac OS X]
(100.0% in signature vs 01.53% overall) platform_pretty_version = OS X 10.12 [100.0% vs 41.50% if platform = Mac OS X]
(100.0% in signature vs 01.10% overall) platform_version = 10.12.4 16E195 [100.0% vs 71.51% if platform_pretty_version = OS X 10.12]
(marking this as security sensitive due to the UAF address)
Group: core-security → layout-core-security
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → DUPLICATE
Group: layout-core-security → core-security-release
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.