443424 - Incorrect Message for security error

Status: RESOLVED INACTIVE

(Core :: XPConnect, defect)

Description

[John J. Barton]

The error message that results when the test case for this bug is run is
incorrect in two ways. 
  1) The file name and line number are
wrong:[fileName]=XPCSafeJSObjectWrapper.cpp;
[lineNo]=445;
  2) The error level is marked as "info" rather than "error"


Test case:
https://bugzilla.mozilla.org/attachment.cgi?id=307990

Comment 1

[Jesse Ruderman]

How is this different from bug 442489?  Why is this bug report security-sensitive?

Comment 2

[John J. Barton]

(In reply to comment #1)
> How is this different from bug 442489?  
I don't see any reason to thing that this bug overlaps 442489. This error message looks completely different and arises from a completely different circumstance. Of course it may have the same cause, which would mean one fix gets two bugs.

> Why is this bug report
> security-sensitive?
> 

The example is an exploit.

Comment 3

[:Gavin Sharp [email: [e-mail]]]

(In reply to comment #0)
>   1) The file name and line number are
> wrong:[fileName]=XPCSafeJSObjectWrapper.cpp;
> [lineNo]=445;

See bug 246699 comment 51.

Comment 4

[John J. Barton]

The content of the error message contains the correct file name, so at the point that the error is generated the correct filename is available. It should not be difficult to get the line number from the call stack.

Comment 5

[Daniel Veditz [:dveditz]]

Unhiding this bug. Doing so does not unhide the referenced attachment and nothing about the error message itself is security sensitive.

Comment 6

[BMO Automation]

Per policy at https://wiki.mozilla.org/Bug_Triage/Projects/Bug_Handling/Bug_Husbandry#Inactive_Bugs. If this bug is not an enhancement request or a bug not present in a supported release of Firefox, then it may be reopened.