288685 - Access to memory (cache?) possible through regex manipulation

Status: VERIFIED DUPLICATE of bug 288688

(Core :: JavaScript Engine, defect)

Description

[:Gavin Sharp [email: [e-mail]]]

Some strange results appear when visiting the URL, and it's possible to see what
appears to be some chrome code and contents of other pages, seemingly from the
cache, if you refresh the page enough. Whatever it is that's going on, it
doesn't seem right from looking at the code. IE shows no such behavior.

Happens in Mozilla and Firefox branch builds, I'm not able to currently test the
trunk because I'm at work. Although the testcase is publically available,
marking security sensitive for review from the security group, and apologies if
this is a dupe.

Comment 1

[:Gavin Sharp [email: [e-mail]]]

Reproducable on latest Firefox trunk as well as 1.0.2 release.

Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8b2) Gecko/20050401
Firefox/1.0+
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.6) Gecko/20050327
Firefox/1.0.2

Comment 2

[:Gavin Sharp [email: [e-mail]]]

Apologies, I've found a reference to bug 288608 at
http://cubic.xfo.org.ru/index.cgi?read=53529, and although I can't access it, I
assume that this is a dupe of it. Can I be CC'ed on that bug?

Comment 3

[Christian :Biesinger (don't email me, ping me on IRC)]

*** This bug has been marked as a duplicate of 288688 ***

Comment 4

[Christian :Biesinger (don't email me, ping me on IRC)]

unhiding, since bug 288688 (dupe target) is open, and the bug is public.