268600 - crash when submitting login credentials [@ nsSystemPrincipal::QueryInterface]

Status: RESOLVED WORKSFORME

(Core :: Security: CAPS, defect)

Description

[Evert Jan van Ramselaar]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; rv:1.7.3) Gecko/20041001 Firefox/0.10.1
Build Identifier: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0

When entering login credentials at
https://www.p3.postbank.nl/sesam/SesamLoginServlet and clicking the submit
button (Inloggen) or pressing the enter key, the browser crashes.

Problem occurs in:
Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.5) Gecko/20041107
Firefox/1.0

It was working fine in:
Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; rv:1.7.3) Gecko/20041001
Firefox/0.10.1

Reproducible: Always
Steps to Reproduce:
1. Goto https://www.p3.postbank.nl/sesam/SesamLoginServlet
2. Enter login credentials
3. Press enter key or click on submit button (Inloggen)

Actual Results:  
The browser hangs or crashes.

Expected Results:  
The browser should show a page with lots of money on my bank account. :)

Comment 1

[timeless]

site sends a java applet. check about:plugins, what version of java do you have?

please also figure out whether you need valid credentials to crash, if you do,
this will be painful. if talkback runs, please get the incident id from it. if
not, please copy a report from crash reporter.

Comment 2

[Evert Jan van Ramselaar]

Relevant Talkback Incident ID's:
TB1827741Y, TB1827753K, TB1833798E

You do not need valid credentials to reproduce the crash.

Standard Java plugin is version 1.3.1, but the mentioned site needs 1.4, so I am
using the OJI Plugin [http://javaplugin.sourceforge.net/], which is version
1.4.2. (Mac OS X supports 1.4.2)

Comment 3

[timeless]

i believe we sorta knew we had broken this. i'm not absolutely certain. cc'ing
world from bug 234169

Comment 4

[Steven Michaud [:smichaud] (Retired)]

As timeless noted, this problem is caused by a bug/design-flaw in
Firefox 1.0 that broke the MRJ Plugin, a fixed-up version of which is
used by the Java Embedding Plugin.  I've just released a new version
(0.8.7) of the Java Embedding Plugin that works around this bug.

http://javaplugin.sourceforge.net/
http://sourceforge.net/tracker/index.php?func=detail&aid=1063222&group_id=107955&atid=649116

Comment 5

[Evert Jan van Ramselaar]

The workaround works great! Thanks Steven!

Comment 6

[Gervase Markham [:gerv]]

This is an automated message, with ID "auto-resolve01".

This bug has had no comments for a long time. Statistically, we have found that
bug reports that have not been confirmed by a second user after three months are
highly unlikely to be the source of a fix to the code.

While your input is very important to us, our resources are limited and so we
are asking for your help in focussing our efforts. If you can still reproduce
this problem in the latest version of the product (see below for how to obtain a
copy) or, for feature requests, if it's not present in the latest version and
you still believe we should implement it, please visit the URL of this bug
(given at the top of this mail) and add a comment to that effect, giving more
reproduction information if you have it.

If it is not a problem any longer, you need take no action. If this bug is not
changed in any way in the next two weeks, it will be automatically resolved.
Thank you for your help in this matter.

The latest beta releases can be obtained from:
Firefox:     http://www.mozilla.org/projects/firefox/
Thunderbird: http://www.mozilla.org/products/thunderbird/releases/1.5beta1.html
Seamonkey:   http://www.mozilla.org/projects/seamonkey/

Comment 7

[Steven Michaud [:smichaud] (Retired)]

This should be marked RESOLVED FIXED.  See comment #4 and comment #5.

Comment 8

[Michael Lefevre]

The fix, AIUI, wasn't in the browser but in the plugin, so FIXED isn't
appropriate. Resolving WORKSFORME.