Closed Bug 402320 Opened 17 years ago Closed 17 years ago

[FIX]Crash [@ nsScriptSecurityManager::CheckLoadURIWithPrincipal] with <embed type="image/jpeg">

Categories

(Core :: DOM: Core & HTML, defect, P2)

defect

Tracking

()

VERIFIED FIXED
mozilla1.9beta2

People

(Reporter: hidenosuke, Assigned: bzbarsky)

References

()

Details

(Keywords: crash, testcase)

Crash Data

Attachments

(2 files)

Steps to reproduce:
1. Open http://bugzilla.mozilla.gr.jp/show_bug.cgi?id=3040
2. Firefox crashes.

Build ID is 2007110212.
BreakPad UUID is 4e704870-89d3-11dc-935d-001a4bd43e5c .
Loading the testcase in that Japanese bug report (not the bug report itself) crashes for me on Mac.  The stack trace is similar to the .  Before the crash, I see these assertions:

###!!! ASSERTION: Must have a URI: 'aURI', file /Users/jruderman/trunk/mozilla/content/base/src/nsContentUtils.cpp, line 2080

###!!! ASSERTION: Must have URI: 'uri', file ../../dist/include/necko/nsNetUtil.h, line 1291
Severity: normal → critical
Component: General → Plug-ins
Keywords: crash, testcase
OS: Linux → All
Product: Firefox → Core
QA Contact: general → plugins
Hardware: PC → All
Summary: Crash [nsScriptSecurityManager::CheckLoadURIWithPrincipal] → Crash [@ nsScriptSecurityManager::CheckLoadURIWithPrincipal] with <embed type="image/jpeg">
Version: unspecified → Trunk
The stack trace I get is similar to the one in breakpad (comment 1).
Blocks: 1156
Component: Plug-ins → DOM
QA Contact: plugins → general
Attached patch FixSplinter Review
Assignee: nobody → bzbarsky
Status: NEW → ASSIGNED
Attachment #287220 - Flags: superreview?(jst)
Attachment #287220 - Flags: review?(jst)
Flags: in-testsuite?
Priority: -- → P2
Summary: Crash [@ nsScriptSecurityManager::CheckLoadURIWithPrincipal] with <embed type="image/jpeg"> → [FIX]Crash [@ nsScriptSecurityManager::CheckLoadURIWithPrincipal] with <embed type="image/jpeg">
Target Milestone: --- → mozilla1.9 M10
Attachment #287220 - Flags: superreview?(jst)
Attachment #287220 - Flags: superreview+
Attachment #287220 - Flags: review?(jst)
Attachment #287220 - Flags: review+
(In reply to comment #5)
> Created an attachment (id=287220) [details]
> Fix
 
I tested the patch with trunk/Linux.
No more crash.
Thanks!
Attachment #287220 - Flags: approval1.9?
Flags: blocking1.9?
Flags: blocking1.9? → blocking1.9+
Attachment #287220 - Flags: approval1.9?
Checked in.
Status: ASSIGNED → RESOLVED
Closed: 17 years ago
Resolution: --- → FIXED
verified fixed using Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9b2pre) Gecko/2007112905 Minefield/3.0b2pre. No crash with testcase.
Status: RESOLVED → VERIFIED
Crash Signature: [@ nsScriptSecurityManager::CheckLoadURIWithPrincipal]
Component: DOM → DOM: Core & HTML
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: