[Windows] Compartment mismatch changing root "after" document.write

RESOLVED DUPLICATE of bug 851353

Status

()

--
critical
RESOLVED DUPLICATE of bug 851353
5 years ago
2 years ago

People

(Reporter: jruderman, Assigned: mccr8)

Tracking

(Blocks: 3 bugs, {crash, sec-high, testcase})

Trunk
x86
Windows 7
crash, sec-high, testcase
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Reporter)

Description

5 years ago
Created attachment 775306 [details]
testcase

bp-66a690cb-42f4-452e-98c5-c16952130714

I can reproduce this on Windows but not on Mac.  I don't know why.
(Assignee)

Comment 1

5 years ago
The stack is similar to bug 851353.
(Assignee)

Updated

5 years ago
Keywords: sec-high
(Reporter)

Comment 2

5 years ago
And both testcases involve document.open / document.write.
Depends on: 851353
(Assignee)

Updated

5 years ago
Assignee: nobody → continuation
(Assignee)

Updated

5 years ago
Blocks: 896900
(Assignee)

Comment 3

5 years ago
I can't reproduce on Linux, either.

Jesse, could you see if the patch in bug 851353 fixes this?  Thanks.
Flags: needinfo?(jruderman)
(Assignee)

Comment 4

5 years ago
Matt, maybe you could check if this is fixed on trunk now (on Windows)?  Thanks.
Flags: needinfo?(mwobensmith)
I can repro on Win7 x86 m-c with 2013-07-14, but not on m-c from today, 2013-08-22.

Couldn't repro on Mac, just to confirm what Jesse said.

So should we set this to a duplicate or works for me?
Flags: needinfo?(mwobensmith)
(Assignee)

Comment 6

5 years ago
Thanks, Matt.
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Flags: needinfo?(jruderman)
Resolution: --- → DUPLICATE
Duplicate of bug: 851353

Updated

3 years ago
Group: core-security → core-security-release
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.