Crash in objc_msgSend | -[GeckoNSMenu performSuperKeyEquivalent:]

RESOLVED DUPLICATE of bug 1365825

Status

()

defect
--
critical
RESOLVED DUPLICATE of bug 1365825
2 years ago
a year ago

People

(Reporter: calixte, Unassigned)

Tracking

(Blocks 1 bug, {crash, regression})

55 Branch
Unspecified
macOS
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(firefox53 unaffected, firefox54 unaffected, firefox55 fixed)

Details

(Whiteboard: [clouseau], crash signature)

Reporter

Description

2 years ago
This bug was filed from the Socorro interface and is 
report bp-d173a506-bfad-49a8-ba5f-26e0e0170517.
=============================================================

There are 5 crashes in nightly 55 starting with buildid 20170516122050. In analyzing the backtrace the regression may have been introduced by patch [1] to fix bug 429824.

[1] https://hg.mozilla.org/mozilla-central/rev?node=92ab3e4bdcb957b1fed5f0495f6d9f95e7b3f3cb
Flags: needinfo?(spohl.mozilla.bugs)

Comment 1

2 years ago
the crashing address of most of these reports indicates it's a UAF situation.
Group: core-security
Status: NEW → RESOLVED
Last Resolved: 2 years ago
Flags: needinfo?(spohl.mozilla.bugs)
Resolution: --- → DUPLICATE
Duplicate of bug: 1365825
Group: core-security
You need to log in before you can comment on or make changes to this bug.