1791535 - visiting http in "https-only mode" Crash in [@ mozilla::ipc::FatalError | mozilla::ipc::IProtocol::HandleFatalError | mozilla::ipc::IProtocol::FatalError | mozilla::ipc::PickleFatalError | IPC::MessageReader::FatalError]

Status: RESOLVED DUPLICATE of bug 1793597

(Core :: Security, defect)

Description

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

Reproduced issue with Firefox 104.0.2 and 107.0a1 on Windows 8.1, users in chat also reported it for Linux.

1. In Settings > Privacy & Security
2. go to the bottom and
3. Enable "HTTPS-only mode" for all sites, then
4. visit http://kb.mozillazine.org/network.security.ports.banned.override and
5. use the button to load the page over http which crashes the browser.

Crash report: https://crash-stats.mozilla.org/report/index/00ebccf5-896b-4edb-89e6-84d960220920

MOZ_CRASH Reason: MOZ_CRASH(IPC FatalError in the parent process!)

Top 10 frames of crashing thread:

0 xul.dll mozilla::ipc::FatalError ipc/glue/ProtocolUtils.cpp:170
1 xul.dll mozilla::ipc::IProtocol::HandleFatalError const ipc/glue/ProtocolUtils.cpp:402
2 xul.dll mozilla::ipc::IProtocol::FatalError const ipc/glue/ProtocolUtils.cpp:393
2 xul.dll mozilla::ipc::PickleFatalError ipc/glue/ProtocolUtils.cpp:147
3 xul.dll IPC::MessageReader::FatalError const ipc/chromium/src/chrome/common/ipc_message_utils.h:203
3 xul.dll IPC::ParamTraits<mozilla::dom::WindowGlobalInit>::Read ipc/ipdl/WindowGlobalTypes.cpp:177
4 xul.dll IPC::ReadParam ipc/chromium/src/chrome/common/ipc_message_utils.h:298
4 xul.dll mozilla::dom::PBrowserParent::OnMessageReceived ipc/ipdl/PBrowserParent.cpp:6971
5 xul.dll mozilla::dom::PContentParent::OnMessageReceived ipc/ipdl/PContentParent.cpp:6686
6 xul.dll mozilla::ipc::MessageChannel::DispatchAsyncMessage ipc/glue/MessageChannel.cpp:1756

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

Since the crash volume is low (less than 5 per week), the severity is downgraded to S3. Feel free to change it back if you think the bug is still critical.

For more information, please visit auto_nag documentation.

Comment 2

[Frederik Braun [:freddy]]

I believe this is a dupe of bug 1793597, which has a bit more info.