Closed
Bug 780219
Opened 12 years ago
Closed 5 years ago
ABORT: file gecko/ipc/chromium/src/base/pickle.cc, line 198 (Pickle::ReadSize)
Categories
(Core :: IPC, defect)
Tracking
()
RESOLVED
WORKSFORME
| blocking-basecamp | - |
People
(Reporter: posidron, Unassigned)
References
(Blocks 1 open bug)
Details
(Keywords: crash)
Crash Data
Attachments
(1 file)
|
10.14 KB,
text/plain
|
Details |
In this scenario the Write|Datatype|() functions of Pickle were hooked to use abnormal values.
This abort happened during the launch of Firefox.
Let me know if you need further information.
|
||
Updated•12 years ago
|
blocking-basecamp: --- → ?
|
|
||
Updated•12 years ago
|
Whiteboard: [blocked-on-input Chris Jones]
This is a way for buggy/malicious content processes to DoS the phone. It's one of very many.
Definitely a polish issue, but not a blocker.
blocking-basecamp: ? → -
Whiteboard: [blocked-on-input Chris Jones]
|
||
Updated•11 years ago
|
Crash Signature: [@ mozalloc_abort(char const* const) | NS_DebugBreak | mozilla::Logger::~Logger()]
|
|
||
Updated•11 years ago
|
Summary: ABORT: file gecko/ipc/chromium/src/base/pickle.cc, line 198 → ABORT: file gecko/ipc/chromium/src/base/pickle.cc, line 198 (Pickle::ReadSize)
|
||
Comment 2•11 years ago
|
||
Is there a test case for this?
|
||
Comment 6•11 years ago
|
||
Crash reported on SUMO: https://support.mozilla.org/en-US/questions/986812
|
||
Updated•9 years ago
|
Crash Signature: [@ mozalloc_abort(char const* const) | NS_DebugBreak | mozilla::Logger::~Logger()] → [@ mozalloc_abort(char const* const) | NS_DebugBreak | mozilla::Logger::~Logger()]
[@ mozalloc_abort | NS_DebugBreak | mozilla::Logger::~Logger]
|
||
Comment 7•5 years ago
|
||
Closing because no crashes reported for 12 weeks.
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → WORKSFORME
You need to log in
before you can comment on or make changes to this bug.
Description
•