2026921 - Tab crash on webauthn with multiple credentials in evalByCredential

Status: RESOLVED DUPLICATE of bug 2026688

(Core :: DOM: Web Authentication, defect)

Description

[Tilman Stehr]

Attachment: crash.html

Steps to reproduce:

1. Serve the attached file on localhost
2. Open the file in Firefox (149 or later)
3. Click the "Call navigator.credential.get()" button

Actual results:

The tab crashes with a "Gah. Your tab just crashed." full screen page. There's an associated crash report that I've submitted.

Expected results:

I expected Firefox to show the security key webauthn unlock UI. The crash is a regression, Firefox 148 shows the expected behavior.

As far as I can tell the crash is triggered by multiple credentials being present in the extensions.prf.evalByCredential object of the PublicKeyCredentialRequestOptions passed into navigator.credentials.get(). The crash doesn't happen with only one entry in the object.

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Core::DOM: Web Authentication' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 2

[Mayank Bansal]

Confiemed
Crash: https://crash-stats.mozilla.org/report/index/631fefb2-bf60-4bce-8645-930b90260327