Closed
Bug 1605123
Opened 4 years ago
Closed 4 years ago
Assertion failure: mKeyword == CSP_UNSAFE_INLINE (should only invalidate unsafe-inline), at /builds/worker/workspace/build/src/dom/security/nsCSPUtils.cpp:845
Categories
(Core :: DOM: Security, defect, P1)
Core
DOM: Security
Tracking
()
RESOLVED
FIXED
mozilla73
Tracking | Status | |
---|---|---|
firefox-esr68 | --- | unaffected |
firefox71 | --- | unaffected |
firefox72 | --- | unaffected |
firefox73 | --- | fixed |
People
(Reporter: bc, Assigned: jkt)
References
(Regression, )
Details
(Keywords: assertion, regression, Whiteboard: [domsecurity-active])
Attachments
(1 file)
- https://www.pinterest.ca/lorileeee/ + 85 other urls so far
- Assertion Nightly Linux/Windows but not Beta.
This looks like a recent regression.
Assertion failure: mKeyword == CSP_UNSAFE_INLINE (should only invalidate unsafe-inline), at /builds/worker/workspace/build/src/dom/security/nsCSPUtils.cpp:845
#01: nsCSPDirective::allows(CSPKeyword, nsTSubstring<char16_t> const&, bool) const [dom/security/nsCSPUtils.cpp:1052]
#02: nsCSPPolicy::allows(unsigned int, CSPKeyword, nsTSubstring<char16_t> const&, bool) const [dom/security/nsCSPUtils.cpp:0]
#03: nsCSPContext::GetAllowsInline(unsigned int, nsTSubstring<char16_t> const&, bool, mozilla::dom::Element*, nsICSPEventListener*, nsTSubstring<char16_t> const&, unsigned int, unsigned int, bool*) [dom/security/nsCSPContext.cpp:550]
#04: mozilla::dom::ScriptLoader::ProcessInlineScript(nsIScriptElement*, mozilla::dom::ScriptKind) [dom/script/ScriptLoader.cpp:1782]
#05: mozilla::dom::ScriptLoader::ProcessScriptElement(nsIScriptElement*) [dom/script/ScriptLoader.cpp:1592]
#06: mozilla::dom::ScriptElement::MaybeProcessScript() [dom/script/ScriptElement.cpp:118]
#07: nsHtml5TreeOpExecutor::RunScript(nsIContent*) [parser/html/nsHtml5TreeOpExecutor.cpp:738]
#08: nsHtml5TreeOpExecutor::RunFlushLoop() [parser/html/nsHtml5TreeOpExecutor.cpp:544]
#09: nsHtml5ExecutorFlusher::Run() [parser/html/nsHtml5StreamParser.cpp:0]
#10: mozilla::SchedulerGroup::Runnable::Run() [xpcom/threads/SchedulerGroup.cpp:282]
#11: nsThread::ProcessNextEvent(bool, bool*) [xpcom/threads/nsThread.cpp:1241]
#12: NS_ProcessNextEvent(nsIThread*, bool) [xpcom/threads/nsThreadUtils.cpp:486]
#13: mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) [ipc/glue/MessagePump.cpp:87]
#14: MessageLoop::Run() [ipc/chromium/src/base/message_loop.cc:291]
#15: nsBaseAppShell::Run() [widget/nsBaseAppShell.cpp:139]
#16: XRE_RunAppShell() [toolkit/xre/nsEmbedFunctions.cpp:946]
#17: mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) [ipc/glue/MessagePump.cpp:237]
#18: MessageLoop::Run() [ipc/chromium/src/base/message_loop.cc:291]
#19: XRE_InitChildProcess(int, char**, XREChildData const*) [toolkit/xre/nsEmbedFunctions.cpp:781]
#20: content_process_main(mozilla::Bootstrap*, int, char**) [ipc/contentproc/plugin-container.cpp:57]
#21: main [browser/app/nsBrowserApp.cpp:303]
#22: libc.so.6 + 0x23f43
#23: _start
Assignee | ||
Comment 1•4 years ago
|
||
Almost certain this was me with Bug 1603709
Updated•4 years ago
|
Has Regression Range: --- → yes
Assignee | ||
Comment 2•4 years ago
|
||
Assignee | ||
Updated•4 years ago
|
Priority: -- → P1
Whiteboard: [domsecurity-active]
Pushed by jkingston@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/bbef22fa266a Fix CSP keyword invalidation assertion crash. r=ckerschb
Reporter | ||
Updated•4 years ago
|
Keywords: regressionwindow-wanted
Comment 4•4 years ago
|
||
bugherder |
Status: ASSIGNED → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla73
Updated•4 years ago
|
status-firefox71:
--- → unaffected
status-firefox72:
--- → unaffected
status-firefox-esr68:
--- → unaffected
You need to log in
before you can comment on or make changes to this bug.
Description
•