Special crafted select element crashes in direct2d enabled

RESOLVED DUPLICATE of bug 656589

Status

()

RESOLVED DUPLICATE of bug 656589
7 years ago
5 years ago

People

(Reporter: markus, Unassigned)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Reporter)

Description

7 years ago
User-Agent:       Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
Build Identifier: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1

During web development I generated a HTML code fragment which crashed the browser.

Reproducible: Always

Steps to Reproduce:
1. open select.html in browser
2. click on select element


Actual Results:  
Crashes browser

Expected Results:  
Should not crash

Only crashes when "gfx.direct2d.disabled" is set to "false" (the default on my system).
(Reporter)

Comment 1

7 years ago
Created attachment 535048 [details]
Special crafted select element crashes browser on click when direct2d is enabled
(Reporter)

Comment 2

7 years ago
I'm actually not sure if it's really a security issue at all, but the browse being able to be crashed that way didn't look good to me.

Here's one of the crash reports I sent:
https://crash-stats.mozilla.com/report/index/bp-c0d71539-4dcc-4b6f-8ea0-8396a2110525
(Reporter)

Updated

7 years ago
Status: UNCONFIRMED → RESOLVED
Last Resolved: 7 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 656589
Group: core-security
You need to log in before you can comment on or make changes to this bug.