935280 - crash in memmove | kernel32.dll@0x4d3b9

Status: VERIFIED FIXED

(Core :: XPCOM, defect)

Description

[Hugh Nougher [:Hughman]]

This bug was filed from the Socorro interface and is 
report bp-a24dd292-e311-4972-bf9f-a3b102131105.
=============================================================
To reproduce this crash I just have to click the "Listen" link at http://apple.neostreams.info:10007/ or just paste the resulting link into the address bar ( http://apple.neostreams.info:10007/listen.pls ). You most likely do not want to listen to the radio station though.

The result I expect when clicking it is for the "What should Nightly do with this file" dialogue but it never shows.

Also it seems the crash does not happen if downloading a PDF attachment in Gmail.

Comment 1

[Alice0775 White]

I can reproduce the crash on Windows7 and WindowsXP

Steeps To Reproduce:
1. Open http://apple.neostreams.info:10007/
2. Click "Listen" link at the top of the page
3. When popup "Opening listen.pls" helper dialog,
   Click "Browse" button
   OR
   Click "Open with" drop down list and choose "Other..."


Regression window(m-i)
Good:
http://hg.mozilla.org/integration/mozilla-inbound/rev/2ea21428f70c
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:28.0) Gecko/20100101 Firefox/28.0 ID:20131104102808
Bad:
http://hg.mozilla.org/integration/mozilla-inbound/rev/08d4847dfd5c
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:28.0) Gecko/20100101 Firefox/28.0 ID:20131104113207
Pushlog:
http://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=2ea21428f70c&tochange=08d4847dfd5c

Comment 2

[Alice0775 White]

In local build
Last Good: c42c1d8bd703
First Bad: 2e6063aa9b77

Regressed by: 
	2e6063aa9b77	James Kitchener — Bug 328755 - Assigning a zero-length string should not alloc a buffer. r=bsmedberg

Comment 4

[Matt Brubeck (:mbrubeck)]

Backed out bug 328755:
http://hg.mozilla.org/mozilla-central/rev/9ba3faa35c96