Closed Bug 1691831 Opened 2 years ago Closed 2 years ago

After browsing yahoo.com with VO, Firefox indefinitely hangs

Categories

(Core :: Disability Access APIs, defect, P1)

Product:
Core
Component:
Disability Access APIs
Platform:
Unspecified
macOS
Type:
defect

Tracking

()

Status:
RESOLVED FIXED
Milestone:
87 Branch
Tracking Flags:
Tracking Status
firefox-esr78 --- unaffected
firefox85 --- unaffected
firefox86 --- unaffected
firefox87 --- fixed

People

(Reporter: eeejay, Assigned: eeejay)

References

(Regression)

Details

(Keywords: regression, Whiteboard: [mac2020_2])

Attachments

(1 file)

Bug 1691831 - Clamp offsets to character count in HyperTextIterator. r?morgan!
48 bytes, text/x-phabricator-request
Details | Review

It looks like this is caused by invalid offsets passed to the attributed text getter. Those offset values should be clamped to the character count of containers.

Severity: -- → S2
Priority: -- → P1

I tried to come up with a good test for this, that reproduces the issue in a demonstratable way, but couldn't.

Pushed by eisaacson@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/7daa9a759d26
Clamp offsets to character count in HyperTextIterator. r=morgan

Set release status flags based on info from the regressing bug 1690342

status-firefox85: --- → unaffected
status-firefox86: --- → unaffected
status-firefox87: --- → affected
status-firefox-esr78: --- → unaffected

https://hg.mozilla.org/mozilla-central/rev/7daa9a759d26

Status: NEW → RESOLVED
Closed: 2 years ago
status-firefox87: affected → fixed
Resolution: --- → FIXED
Target Milestone: --- → 87 Branch
OS: Unspecified → macOS
Whiteboard: [mac2020_2]
Has Regression Range: --- → yes
You need to log in before you can comment on or make changes to this bug.