Closed Bug 316659 Opened 20 years ago Closed 20 years ago

null dereference crash in markPageAsTyped

Categories

(Firefox :: Bookmarks & History, defect, P5)

2.0 Branch
defect

Tracking

()

RESOLVED FIXED
Firefox 2 alpha2

People

(Reporter: Gavin, Assigned: Gavin)

References

()

Details

(Keywords: crash, verified1.8.1)

Attachments

(1 file)

This is a toolkit bug, but there's no Toolkit:History. nsGlobalHistory::MarkPageAsTyped doesn't null check aURI, so passing null (from js, in this case) results in a crash.
Attached patch patchSplinter Review
Clean up a few others as well.
Attachment #203213 - Flags: review?(bugs.mano)
Status: NEW → ASSIGNED
Priority: -- → P5
Comment on attachment 203213 [details] [diff] [review] patch r=mano.
Attachment #203213 - Flags: review?(bugs.mano) → review+
Whiteboard: [checkin needed]
mozilla/toolkit/components/history/src/nsGlobalHistory.cpp; new revision: 1.63;
Status: ASSIGNED → RESOLVED
Closed: 20 years ago
Resolution: --- → FIXED
Summary: null dereference in markPageAsTyped → null dereference crash in markPageAsTyped
Whiteboard: [checkin needed]
Attachment #203213 - Flags: approval1.8.1?
Severity: normal → critical
Comment on attachment 203213 [details] [diff] [review] patch This code will be going away with the new places impl.
Attachment #203213 - Flags: approval1.8.1? → approval1.8.1-
Attachment #203213 - Flags: approval1.8.1- → approval-branch-1.8.1?(benjamin)
Attachment #203213 - Flags: approval-branch-1.8.1?(benjamin) → approval-branch-1.8.1+
mozilla/toolkit/components/history/src/nsGlobalHistory.cpp 1.58.2.6
Keywords: crash, fixed1.8.1
Version: Trunk → 2.0 Branch
Target Milestone: Firefox 2 → Firefox 2 alpha2
Verified fixed using Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1b2) Gecko/20060822 BonEcho/2.0b2.
Component: History → Bookmarks & History
QA Contact: history → bookmarks
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: