Closed Bug 893527 Opened 6 years ago Closed 6 years ago

[Windows] Compartment mismatch changing root "after" document.write

Categories

(Core :: DOM: Core & HTML, defect, critical)

x86
Windows 7
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 851353

People

(Reporter: jruderman, Assigned: mccr8)

References

(Blocks 2 open bugs)

Details

(Keywords: crash, sec-high, testcase)

Attachments

(1 file)

Attached file testcase
bp-66a690cb-42f4-452e-98c5-c16952130714

I can reproduce this on Windows but not on Mac.  I don't know why.
The stack is similar to bug 851353.
Keywords: sec-high
And both testcases involve document.open / document.write.
Depends on: CVE-2013-1730
Assignee: nobody → continuation
Blocks: 896900
I can't reproduce on Linux, either.

Jesse, could you see if the patch in bug 851353 fixes this?  Thanks.
Flags: needinfo?(jruderman)
Matt, maybe you could check if this is fixed on trunk now (on Windows)?  Thanks.
Flags: needinfo?(mwobensmith)
I can repro on Win7 x86 m-c with 2013-07-14, but not on m-c from today, 2013-08-22.

Couldn't repro on Mac, just to confirm what Jesse said.

So should we set this to a duplicate or works for me?
Flags: needinfo?(mwobensmith)
Thanks, Matt.
Status: NEW → RESOLVED
Closed: 6 years ago
Flags: needinfo?(jruderman)
Resolution: --- → DUPLICATE
Duplicate of bug: CVE-2013-1730
Group: core-security → core-security-release
Group: core-security-release
Component: DOM → DOM: Core & HTML
You need to log in before you can comment on or make changes to this bug.