Closed Bug 671756 Opened 10 years ago Closed 10 years ago

crash via mozilla::gl::GLContext::UploadSurfaceToTexture on mac playing a video

Categories

(Core :: Graphics, defect)

x86
macOS
defect
Not set
normal

Tracking

()

RESOLVED FIXED
mozilla8
Tracking Status
firefox5 - unaffected
firefox6 --- unaffected
firefox7 + fixed
firefox8 + fixed
status1.9.2 --- unaffected

People

(Reporter: gal, Unassigned)

References

Details

(Keywords: regression, Whiteboard: [sg:critical?][qa-])

Crash Data

Playing the video at https://browserid.org/users reliably crashes my MacOSX nightly build. Crash address looks random, so this might be exploitable.

https://crash-stats.mozilla.com/report/index/bp-a32bd99f-d985-46f4-ba3f-7ce132110714
Whiteboard: [sg:critical?]
Crash Signature: [@ libGLImage.dylib@0x4caf ]
If this is a dupe of bug 670573 then Firefox 5 and 6 should not be affected.

qawanted: test this video on Firefox 5, 6, and 7
Keywords: qawanted
Tested this video using:

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:5.0.1) Gecko/20100101 Firefox/5.0.1

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:6.0) Gecko/20100101 Firefox/6.0

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:7.0a2) Gecko/20110804 Firefox/7.0a2

and was not able to crash playing the video.
Keywords: qawanted
And this should be resolved everywhere because bug 670573 landed on mozilla-central and mozila-aurora and mozilla-beta was unaffected. If it still happens anywhere it isn't a strict dupe of bug 670573.

Clearing the tracking for Firefox 6.
Group: core-security
Target Milestone: --- → mozilla8
Keywords: regression
Blocks: 656185
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → FIXED
qa- as QA was unable to reproduce this bug originally. Andreas, please verify this bug is fixed in Firefox 7 and 8.
Whiteboard: [sg:critical?] → [sg:critical?][qa-]
You need to log in before you can comment on or make changes to this bug.