91484 - Proxy: SSL Proxy crashes w/ auth

Status: VERIFIED FIXED

(Core :: Networking, defect)

Description

[sebastien ailleret]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.2) Gecko/20010628
BuildID:    mozilla 0.9.2

When using a proxy with authentication (ex swiftsurf :
http://pauillac.inria.fr/~ailleret/prog/swiftsurf/), the browser crashes when it
is asked a password for authentication by the proxy. If the proxy is also used
for http, and if the authentication has been done with http (which works
perfectly), https through the proxy works without problem.

Reproducible: Always
Steps to Reproduce:
1.configure mozilla for using a proxy for https
2.configure the proxy for asking authentication
3.open mozilla and ask an https url

Actual Results:  a crash occurs. Mozilla seems not to like very much strange
answers with https.

Expected Results:  pop up a window for asking login/pass for the proxy

Comment 1

[Oliver Klee]

Over to Security:General.

Comment 2

[Mitchell Stoltz (not reading bugmail)]

->Networking

Comment 3

[benc]

Mozialla 0.9.2, Win32 on Win98 + Linux.
I have proxy-only for HTTPS, authed and went to the site in the URL field, and
did not crash.

Let's get more info:

1- What comes back if you enter a bad username:password for the proxy.
2- What happnes if you cancel accessing for username proxy.

A packet trace could show abnormalities in the Proxy-Auth from client-proxy, but
any tunneled problems would be un-decypherable with normal tools.

Comment 4

[sebastien ailleret]

The problem is not specific with this url. It is the same for all https urls.

I cannot give a bad authentication, because the browser crash before asking it.
It crashes as soon as it receives :
HTTP/1.0 407 Proxy authentication required
Proxy-Authenticate: Basic realm="Give a proxy authentication"

Comment 5

[sebastien ailleret]

Someone gives me access to his proxy (thanks to him), and it works perfectly
with it (no crash). But I think my proxy is also properly working. The problem
only appears when the proxy and mozilla are on the same host. Maybe the proxy
answers too quickly to mozilla.

With netscape 4.75 and Opera 5, there are no problem at all.

Comment 6

[benc]

Any chance you proxy is public access and one or two people can test against it?

Either that or can we get a packet trace (**** computer that proxies itself).

Comment 7

[benc]

qawanted - this is proxy specific and I cannot analzye this further this week.

Comment 8

[Asa Dotzler [:asa]]

If you are crashing in Mozilla the best thing you can do to help the developers
fix your bug is to attach a stacktrace. If you're not building yourself you are
not out of luck.  Mozilla (thanks to a very cool donation from Netscape)
releases nightly and milestone builds with Full Circle's Talkback. Talkback
should catch most crashes and offer to send in a crash report. I can retrieve
that crash report and attach it to your bug report if you provide either the
Incident ID (you can get it by running the talkback program from
/components/talkback/) or you can let me know the email address you used to
submit the report and the time of sending. Thanks for your help in testing
Mozilla and reporting bugs.

Comment 9

[Christian Reis]

Sebastian, we need some feedback to be able to confirm/identify this bug. Please
make an effort to helping us, either by running a talkback build or through GDB.

Comment 10

[sebastien ailleret]

Sorry not to have answered sooner, but i hadn't tested yet with new versions of
mozilla and the problem has been fixed in 0.9.3 (cannot reproduce the bug with
0.9.3 and 0.9.4)

Comment 11

[benc]

VERIFIED
I test for this in Mozilla functional tests.