Closed Bug 1550606 Opened 5 years ago Closed 5 years ago

Intermittent /x-frame-options/sameorigin.sub.html | `XFO: SAMEORIGIN` allows same-origin nested in same-origin framing. - assert_equals: expected "Loaded" but got "Failed"

Categories

(Core :: DOM: Security, defect, P5)

defect

Tracking

()

RESOLVED FIXED
mozilla69
Tracking Status
firefox-esr60 --- unaffected
firefox67 --- unaffected
firefox68 --- unaffected
firefox69 --- fixed

People

(Reporter: intermittent-bug-filer, Assigned: sefeng)

References

(Regression)

Details

(Keywords: intermittent-failure, regression, Whiteboard: [domsecurity-intermittent][retriggered][wptsync upstream][stockwell fixed:patch])

Attachments

(1 file)

Filed by: cbrindusan [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer.html#?job_id=245610084&repo=autoland
Full log: https://queue.taskcluster.net/v1/task/SJa8CzzTQWe2QdiAteNDOw/runs/0/artifacts/public/logs/live_backing.log


[task 2019-05-09T20:53:35.307Z] 20:53:35 INFO - TEST-START | /x-frame-options/sameorigin.sub.html
[task 2019-05-09T20:53:35.314Z] 20:53:35 INFO - Closing window 12884901889
[task 2019-05-09T20:53:35.411Z] 20:53:35 INFO - PID 24366 | -----------------------------------------------------
[task 2019-05-09T20:53:35.413Z] 20:53:35 INFO - PID 24366 | Suppressions used:
[task 2019-05-09T20:53:35.414Z] 20:53:35 INFO - PID 24366 | count bytes template
[task 2019-05-09T20:53:35.415Z] 20:53:35 INFO - PID 24366 | 28 864 nsComponentManagerImpl
[task 2019-05-09T20:53:35.417Z] 20:53:35 INFO - PID 24366 | 611 17713 libfontconfig.so
[task 2019-05-09T20:53:35.417Z] 20:53:35 INFO - PID 24366 | 1 29 libglib-2.0.so
[task 2019-05-09T20:53:35.418Z] 20:53:35 INFO - PID 24366 | -----------------------------------------------------
[task 2019-05-09T20:53:36.474Z] 20:53:36 INFO - PID 24366 | -----------------------------------------------------
[task 2019-05-09T20:53:36.474Z] 20:53:36 INFO - PID 24366 | Suppressions used:
[task 2019-05-09T20:53:36.477Z] 20:53:36 INFO - PID 24366 | count bytes template
[task 2019-05-09T20:53:36.478Z] 20:53:36 INFO - PID 24366 | 28 864 nsComponentManagerImpl
[task 2019-05-09T20:53:36.478Z] 20:53:36 INFO - PID 24366 | 611 17713 libfontconfig.so
[task 2019-05-09T20:53:36.478Z] 20:53:36 INFO - PID 24366 | 1 29 libglib-2.0.so
[task 2019-05-09T20:53:36.480Z] 20:53:36 INFO - PID 24366 | -----------------------------------------------------
[task 2019-05-09T20:53:36.706Z] 20:53:36 INFO -
[task 2019-05-09T20:53:36.706Z] 20:53:36 INFO - TEST-PASS | /x-frame-options/sameorigin.sub.html | XFO: SAMEORIGIN allows same-origin framing.
[task 2019-05-09T20:53:36.706Z] 20:53:36 INFO - TEST-UNEXPECTED-FAIL | /x-frame-options/sameorigin.sub.html | XFO: SAMEORIGIN allows same-origin nested in same-origin framing. - assert_equals: expected "Loaded" but got "Failed"

Whiteboard: [domsecurity-intermittent]

Retriggers show this is from Bug 1534012, Sean, please take a look.

Flags: needinfo?(sefeng)
Regressed by: 1534012

hey apavel: Bug 1534012 got backed out, so I don't think it caused the regression?

Flags: needinfo?(sefeng)

Hi Sean, I know, I saw it. There are no occurrences since the bug got backed out. However, I looked into this and you should know when fixing bug 1534012 that this is an issue that needs to be fixed too.

Flags: needinfo?(sefeng)

apavel: yep, thanks. I'll keep that in mind!

From IRC:

sefeng> apavel|sheriffduty: ah yeah looking...I thought I fixed it, but it is flaky
5:17 PM apavel|sheriffduty: sorry about that

Whiteboard: [domsecurity-intermittent][retriggered] → [domsecurity-intermittent][retriggered][stockwell needswork:owner]

We used to use 2 rAFs to stop the load event from racing with
onmessage event, but this was not the proper solution and it was
still racy, especially after Bug 1534012 is landed. So we fixed it
by instead letting racy postMessage to be sent, we wait for the
proper postMessage to be sent, and the test would automatically
timeout if the proper postMessage failed to sent.

Definitely my patch caused it. The actual problem was a buggy web platform test. The patch to fix the bug is up, and this is the try push https://treeherder.mozilla.org/#/jobs?repo=try&revision=ccc77a4b6a3be7927e888106e7b795e740222104. I'll wait for the try push result.

Pushed by sefeng@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/28a981abcc6c
Fix a race condition in WPT related to postMessage r=smaug
Created web-platform-tests PR https://github.com/web-platform-tests/wpt/pull/16946 for changes under testing/web-platform/tests
Whiteboard: [domsecurity-intermittent][retriggered][stockwell needswork:owner] → [domsecurity-intermittent][retriggered][stockwell needswork:owner][wptsync upstream]
Upstream web-platform-tests status checks passed, PR will merge once commit reaches central.
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla69
Assignee: nobody → sefeng
Flags: needinfo?(sefeng)
Whiteboard: [domsecurity-intermittent][retriggered][wptsync upstream][stockwell disable-recommended] → [domsecurity-intermittent][retriggered][wptsync upstream][stockwell fixed:patch]
Has Regression Range: --- → yes
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: