848302 - [BROWSER] Opening a URL protected with basic authentication crashes the phone

Status: VERIFIED FIXED

(Firefox OS Graveyard :: Gaia::Browser, defect)

Description

[Carlos Martínez Toral [:carlosmartinez]]

Attachment: Strange screen in browser app when opening an URL

Tested in unagi with Gecko-9306ad2.Gaia-7636cc5.

STR:
1-Open browser app
2-Tap in the address bar
3-Type https://owd.tid.es/releases
4-Press enter

Expected result --> Page is loaded correctly and ask the user for user and password

Actual result --> A weird screen is shown (see screenshot attached) and if you tap the screen the phone freezes and you have to pull the battery out to recover it

Comment 1

[Antonio Manuel Amaya Calvo (:amac)]

The weird screen looks suspiciously like the standard dialog that's shown on desktop Firefox when a server requests basic authentication (which this server does, incidentally). On yesterday's build it was working correctly.

Comment 2

[Ben Francis [:benfrancis]]

I can confirm this bug.

Justin, could this be a regression from bug 844530 ?

Comment 3

[Ben Francis [:benfrancis]]

I can confirm this bug.

Justin, could this be a regression from bug 844530 ?

Comment 4

[Scoobidiver (away)]

A crash is always critical especially an OS one although the situation is not frequent.

Comment 5

[Ben Francis [:benfrancis]]

If comment 2 (and comment 3!) is correct then the change that caused this regression isn't going to be uplifted to 1.0.1 so this bug doesn't even exist in that branch. I doubt this needs to be tef+

QA could verify this.

Comment 6

[Daniel Coloma:dcoloma]

(In reply to Ben Francis [:benfrancis] from comment #5)
> If comment 2 (and comment 3!) is correct then the change that caused this
> regression isn't going to be uplifted to 1.0.1 so this bug doesn't even
> exist in that branch. I doubt this needs to be tef+
> 
> QA could verify this.

OK, un-noming until this is clarified.

Comment 7

[Andrew Overholt [:overholt]]

We had a similar bug a while back:  bug 775464.

Comment 8

[Antonio Manuel Amaya Calvo (:amac)]

(In reply to Ben Francis [:benfrancis] from comment #5)
> If comment 2 (and comment 3!) is correct then the change that caused this
> regression isn't going to be uplifted to 1.0.1 so this bug doesn't even
> exist in that branch. I doubt this needs to be tef+
> 
> QA could verify this.

Just checked it and today's version with the 1.0.1 branch doesn't break.

Comment 9

[Justin Lebar (not reading bugmail)]

> 3-Type https://owd.tid.es/releases

FWIW I can't access this site because it has an invalid cert.

Comment 10

[Antonio Manuel Amaya Calvo (:amac)]

Attachment: Script and certificate database to allow browsing of https://owd.tid.es

This zip includes a certificate database and the script to load it on a B2G phone. This allows browsing https://owd.tid.es

Comment 11

[Antonio Manuel Amaya Calvo (:amac)]

(In reply to Justin Lebar [:jlebar] from comment #9)
> > 3-Type https://owd.tid.es/releases
> 
> FWIW I can't access this site because it has an invalid cert.

It should fail on any site requiring basic authentication, in any case I just uploaded an attachment with a certdDB that has the required CAs and a script to install it on the phone.

Comment 12

[Justin Lebar (not reading bugmail)]

(In reply to Ben Francis [:benfrancis] from comment #3)
> Justin, could this be a regression from bug 844530 ?

Looks like my patch there was 100% bogus.  :(

Let's back it out and then we can figure out how to fix that bug properly.

Comment 13

[Justin Lebar (not reading bugmail)]

The backout in bug 844530 fixes this problem in my testing.  Sorry about breaking this, everyone.

Comment 14

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/mozilla-central/rev/fdc942a65143

Fixed by backout.

Comment 15

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

Gecko  http://hg.mozilla.org/releases/mozilla-b2g18/rev/a0b06192f882
Gaia   fa5245750e7bb94b9f64180967536509316dedf5
BuildID 20130307103636
Version 18.0

Verified

Comment 17

[:CSchmoeckel]

Added Browser Suite Test Case #8600 [Browser] Test that the Browser App can log in to a web page protected by a secure protocol