307981 - Evil RandomStyles page makes Firefox stop repainting in that window

Status: RESOLVED WORKSFORME

(Core Graveyard :: GFX: Mac, defect)

Description

[Jesse Ruderman]

Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.9a1) Gecko/20050910
Firefox/1.6a1

Filing as security-sensitive because:
(1) The behavior might be a spoofing hole by itself.
(2) I haven't checked the behavior on other platforms.
(3) The behavior might be the result of memory corruption, which could be a
severe security hole.
(4) The testcase includes code from bug 306939 as well as other code that I
might want to keep secret for a while.

Comment 1

[Jesse Ruderman]

Attachment: testcase (not reduced)

Firefox will stop repainting while the status bar counter says 2149.  You will
be able to tell that it has stopped repainting because (1) the status bar
counter never shows 2150 and (2) clicking the browser's Home button makes the
titlebar show your homepage's title.

Comment 2

[Jesse Ruderman]

No ill effects on Windows.  Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
rv:1.9a1) Gecko/20050908 Firefox/1.6a1

Comment 3

[Jesse Ruderman]

WFM Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.9a1)
Gecko/20051005 Firefox/1.6a1.

Comment 4

[Jesse Ruderman]

WFM Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8b5)
Gecko/20051005 Firefox/1.4.1

Comment 5

[Jesse Ruderman]

trunk sept 26: stops repainting
Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.9a1) Gecko/20050926
Firefox/1.6a1

trunk sept 27: no problems
Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.9a1) Gecko/20050927
Firefox/1.6a1

I don't know which checkin made it work, so marking as WFM instead of DUP/FIXED.