389964 - Cross-site XMLHttpRequest broke the ability to use XMLHttpRequest from C++ triggering a crash [@ IsSameOrigin]

Status: RESOLVED FIXED

(Core :: DOM: Core & HTML, defect)

Description

[Ben Turner (not reading bugmail, use the needinfo flag!)]

Here's the code we use:

  nsCOMPtr<nsIXMLHttpRequest> request = 
    do_CreateInstance(NS_XMLHTTPREQUEST_CONTRACTID, &rv);
  rv = request->OpenRequest(NS_LITERAL_CSTRING("GET"),
                            NS_LITERAL_CSTRING(SCHEMA_URL),
                            PR_FALSE, EmptyString(), EmptyString());

And we crash. See attachment the stack when crashing. It seems that we're sending a null principal to IsSameOrigin. The attachment also has the stack for where we should be getting the principal, but the code returns null if there is no JS context on the stack.

Comment 1

[Ben Turner (not reading bugmail, use the needinfo flag!)]

Attachment: Crash and GetSubjectPrincipal stacks

Comment 2

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

Fixed by patch in bug 389508