Closed
Bug 1910114
Opened 1 year ago
Closed 1 year ago
Crash in [@ mozilla::extensions::URLInfo::Host]
Categories
(WebExtensions :: General, defect)
WebExtensions
General
Tracking
(firefox-esr115 unaffected, firefox-esr128 unaffected, firefox128 unaffected, firefox129 unaffected, firefox130blocking fixed)
RESOLVED
DUPLICATE
of bug 1910110
| Tracking | Status | |
|---|---|---|
| firefox-esr115 | --- | unaffected |
| firefox-esr128 | --- | unaffected |
| firefox128 | --- | unaffected |
| firefox129 | --- | unaffected |
| firefox130 | blocking | fixed |
People
(Reporter: pascalc, Unassigned)
References
(Regression)
Details
(Keywords: crash, regression, topcrash)
Crash Data
Crash report: https://crash-stats.mozilla.org/report/index/902234c6-c003-4912-860c-96e770240726
Reason: SIGSEGV / SEGV_MAPERR
Top 10 frames:
0 libxul.so mozilla::extensions::URLInfo::Host() const toolkit/components/extensions/MatchPattern.cpp:130
0 libxul.so mozilla::extensions::URLInfo::HostAtom() const toolkit/components/extensions/MatchPattern.cpp:137
0 libxul.so mozilla::extensions::WebExtensionPolicy::IsRestrictedURI(mozilla::extensions:... toolkit/components/extensions/WebExtensionPolicy.cpp:541
1 libxul.so mozilla::extensions::WebExtensionPolicyCore::CanAccessURI(mozilla::extensions... toolkit/components/extensions/WebExtensionPolicy.cpp:264
2 libxul.so mozilla::extensions::WebExtensionPolicy::CanAccessURI(mozilla::extensions::UR... toolkit/components/extensions/WebExtensionPolicy.h:249
2 libxul.so mozilla::extensions::ChannelWrapper::GetTraceableChannel(mozilla::extensions:... toolkit/components/extensions/webrequest/ChannelWrapper.cpp:821
3 libxul.so mozilla::extensions::WebRequestService::GetTraceableChannel(unsigned long, mo... toolkit/components/extensions/webrequest/WebRequestService.cpp:43
4 libxul.so mozilla::extensions::ChannelWrapper::GetRegisteredChannel(mozilla::dom::Globa... toolkit/components/extensions/webrequest/ChannelWrapper.cpp:183
5 libxul.so mozilla::dom::ChannelWrapper_Binding::getRegisteredChannel(JSContext*, unsign... dom/bindings/ChannelWrapperBinding.cpp:1006
6 libxul.so CallJSNative(JSContext*, bool (*)(JSContext*, unsigned int, JS::Value*), js::... js/src/vm/Interpreter.cpp:491
Top crash in 20240726035627
Updated•1 year ago
|
Keywords: regressionwindow-wanted
Regressed by: CVE-2024-7525
Comment 2•1 year ago
|
||
The Bugbug bot thinks this bug should belong to the 'Core::JavaScript Engine' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.
Component: Untriaged → JavaScript Engine
Product: Firefox → Core
Comment 3•1 year ago
|
||
Set release status flags based on info from the regressing bug 1909298
:robwu, since you are the author of the regressor, bug 1909298, could you take a look? Also, could you set the severity field?
For more information, please visit BugBot documentation.
status-firefox128:
--- → unaffected
status-firefox129:
--- → unaffected
status-firefox-esr115:
--- → unaffected
status-firefox-esr128:
--- → unaffected
Flags: needinfo?(rob)
Updated•1 year ago
|
Status: NEW → RESOLVED
Closed: 1 year ago
Duplicate of bug: 1910110
Flags: needinfo?(rob)
Resolution: --- → DUPLICATE
Updated•1 year ago
|
Component: JavaScript Engine → General
Product: Core → WebExtensions
Comment 6•1 year ago
|
||
Fixed in Nightly 130.0a1 buildid 20240726152430.
You need to log in
before you can comment on or make changes to this bug.
Description
•