346788 - expired CRL causes crash on close

Status: RESOLVED WORKSFORME

(Core :: Security: PSM, defect)

Description

[Garen Erdoisa]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.5) Gecko/20060719 Firefox/1.5.0.5
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.5) Gecko/20060719 Firefox/1.5.0.5

Using an imported CRL (Certificate Revocation List) that is set to auto update once a day works fine, until the CRL is expired. Then Firefox and Thunderbird both start crashing when you hit the close button on the window. This has been consistant now for the last several months, and simply updating the CRL so that the new expiration date on the CRL is in the future stops the crashes until the CRL is expired again. I've tried reporting the details of this bug using the built in bug report system for the last several months, but no one seems to be paying that any attention. So, I'm escelating this issue to a formal bugzilla report.

Reproducible: Always

Steps to Reproduce:
1. Create a CRL (Certificate Revocation List)
2. Import the CRL into Firefox or Thunderbird, and set it to auto update once a day
3. Wait until the CRL is expired. When you close the firefox or thunderbird window, the application will crash.
4. When you update the CRL so that it is no longer expired, Firefox or Thunderbird will stop crashing when you close the window.

Actual Results:  
Both Firefox and Thunderbird crashed.

Expected Results:  
Neither application should have crashed when you hit the close button.

When Firefox or Thunderbird crash, it brings up a requestor asking you to submit additional information. It also sends the state the application was in. You should be able to search that database to get more specific details on the state the application was in when it crashed since I have been shipping those for the last several months now. Some with comments when I was certain of what was causing the crash, some without comments. Discussing this bug with a friend this last month who was also able to repoduce it we discovered that this bug is specific to versions of Firefox and Thunderbird that are built for Windows, and doesn't manafest on Fedora core 5 Linux.

Comment 1

[Garen Erdoisa]

As of 11/19/2006 After installing Firefox 2.0 and Thunderbird 1.5.0.8 this crash bug is no longer happening on my win XP system.