747843 - firefox consistently crashes on when trying to 'display' an mp3 file

Status: RESOLVED INCOMPLETE

(Firefox :: File Handling, defect, P1)

Description

[Ariel Faigon]

Malicious web site can crash FF1 by sending a bad Content-Type.

Here's a proof of concept.

Compare:
     http://yendor.com/nigunim/el-arriero2-ariel.mp3
     .htacess correctly sets:  AddType application/octet-stream mp3
     File plays fine in firefox.

     http://yendor.com/crashes-ff11/el-arriero2-ariel.mp3
     
     Same file, but causes ff11 to consistently and instantly crash in my env.

I get no crash (and both URLs behave/play as expected) with chrome on the same system.

I have a few extensions installed, among them, firebug, web-developer, noscript, user-agent-switcher.  Not sure if it has anything to do with the crash, just mentioning for the sake of completeness.

Please let me know if you need more data to verify/reproduce.

Comment 1

[Bob Clary [:bc] (inactive)]

could not reproduce with bughunter/crash automation with url http://yendor.com/crashes-ff11/el-arriero2-ariel.mp3 on Beta/12, Aurora/13, Nightly/14 on Windows, OSX 10.6 or RHEL6.

A.F. Can you reproduce and send in the crash report and paste the crash id here?

Comment 2

[Daniel Veditz [:dveditz]]

Actually I suspect plugins since Firefox does not natively handle .mp3 -- maybe the output from about:support would be helpful?

Comment 3

[Al Billings [:abillings - ex-MoCo]]

Closing incomplete since there is no actionable information here and the reporter needs to give us about:support or about:plugins information to act further. Please reopen if information is supplied.