470951 - fennec crashes while running browser security/crash tests from bcheck.scanit.be

Status: VERIFIED WORKSFORME

(Firefox for Android Graveyard :: General, defect)

Description

[Joel Maher ( :jmaher ) (UTC -8)]

one of the litmus testcases we use for Firefox and now for Fennec is the run the security tests at:
http://bcheck.scanit.be/bcheck/

These test a variety of known security issues and can cause the browser to crash (as per the warning).  In the case of Fennec if you run all the tests you will see a crash for these two:
# XMLDOM substringData() heap overflow (CVE-2007-2223)
# Mozilla code execution via QuickTime Media-link files (CVE-2006-4965) 

This happens all the time with the release build that Stuart built for Alpha2 on the Nokia 810 device.  I cannot reproduce this with a debug build on the device or any build on linux desktop.

I will work on finding a reduced test case.  Ted mentioned in IRC that it could be an uninitialized variable.

Comment 1

[Stuart Parmenter]

Joel are we still seeing these?

Comment 2

[Joel Maher ( :jmaher ) (UTC -8)]

I don't have my maemo device, but on the latest build of windows mobile, I was able to pass all tests with no crash.

Comment 3

[Joel Maher ( :jmaher ) (UTC -8)]

I ran the tests twice now in testing for b3 and there are no crashes...close it?

Comment 4

[Mark Finkle (:mfinkle) (use needinfo?)]

done

Comment 5

[Joel Maher ( :jmaher ) (UTC -8)]

verified with 20090819