Closed
Bug 963324
Opened 11 years ago
Closed 11 years ago
layout/reftests/mathml/menclose-1-ref.html tests the wrong feature
Categories
(Core :: MathML, defect)
Core
MathML
Tracking
()
RESOLVED
FIXED
mozilla30
People
(Reporter: dveditz, Assigned: fredw)
References
Details
(Keywords: sec-other, Whiteboard: [adv-main28-][adv-esr24.4-][qa-])
Attachments
(1 file, 1 obsolete file)
15.88 KB,
patch
|
Details | Diff | Splinter Review |
+++ This bug was initially created as a clone of Bug #963198 +++
When the UPDIAGONALARROW notation was added to the <menclose> feature in bug 875294 the test checked in with it used the wrong notation, updiagonalstrike, which we already have tests for.
We need to update layout/reftests/mathml/menclose-1-ref.html to use the intended "updiagonalarrow" notation, which would have caught bug 963198 when we turned on TBPL ASAN tests.
Reporter | ||
Updated•11 years ago
|
Assignee: nobody → bjacob
Assignee | ||
Updated•11 years ago
|
Assignee: bjacob → fred.wang
Assignee | ||
Comment 1•11 years ago
|
||
Add some tests from the MathJax test suite. Updiagonalarrow is tested by menclose-1p.html. The tests are only checking that notation="" renders differently than notation="SOMENOTATION". I only ran them locally, not on the try server, as I don't know what is the policy regarding secured bugs.
I think it would be worth making the fuzzer import tests from https://github.com/mathjax/MathJax-test/tree/master/testsuite/MathMLToDisplay/ if that's not already the case.
I have also opened bug 963453.
Attachment #8364897 -
Flags: review?(dveditz)
Assignee | ||
Comment 2•11 years ago
|
||
Comment on attachment 8364897 [details] [diff] [review]
Import mismatch menclose reftests from the MathJax testsuite
Asking review to Karl for when he is back.
Attachment #8364897 -
Flags: review?(karlt)
Updated•11 years ago
|
Attachment #8364897 -
Flags: review?(karlt) → review+
Updated•11 years ago
|
status-b2g18:
--- → unaffected
status-b2g-v1.1hd:
--- → unaffected
status-b2g-v1.2:
--- → affected
status-b2g-v1.3:
--- → affected
status-b2g-v1.4:
--- → affected
status-firefox27:
--- → affected
status-firefox28:
--- → affected
status-firefox29:
--- → affected
status-firefox-esr24:
--- → affected
Reporter | ||
Comment 3•11 years ago
|
||
Comment on attachment 8364897 [details] [diff] [review]
Import mismatch menclose reftests from the MathJax testsuite
Review of attachment 8364897 [details] [diff] [review]:
-----------------------------------------------------------------
Karl's review is sufficient. I know enough to notice it didn't test what it claimed but otherwise don't know MathML.
Attachment #8364897 -
Flags: review?(dveditz)
Assignee | ||
Comment 4•11 years ago
|
||
Are we waiting any security approval before landing this patch? These are just reftests so they only need to land in trunk. I'm asking that because some volunteers will work on menclose reftests (bug 914031 and probably bug 963453 too).
@Jesse: did you integrate https://github.com/mathjax/MathJax-test/tree/master/testsuite/MathMLToDisplay/ in your fuzzer as suggested in comment 1?
Flags: needinfo?(jruderman)
Comment 5•11 years ago
|
||
This is a sec-other and doesn't need security approval to land though no one has asked on the patch.
Bug 963198 was checked in and fixed so they should just land.
Comment 7•11 years ago
|
||
Comment 8•11 years ago
|
||
Assignee | ||
Comment 9•11 years ago
|
||
Attachment #8364897 -
Attachment is obsolete: true
Assignee | ||
Updated•11 years ago
|
Keywords: checkin-needed
Comment 10•11 years ago
|
||
I haven't integrated the MathJAX test suite yet, but it's on my list.
Flags: needinfo?(jruderman)
Comment 11•11 years ago
|
||
Keywords: checkin-needed
Comment 12•11 years ago
|
||
Status: NEW → RESOLVED
Closed: 11 years ago
status-firefox30:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla30
Comment 13•11 years ago
|
||
(In reply to Frédéric Wang (:fredw) from comment #4)
> These are just reftests so they only need to land in trunk.
Any particular reason for that? Seems like the best way to verify a fix on a branch is to land a test for it :)
Assignee | ||
Comment 14•11 years ago
|
||
(In reply to Ryan VanderMeulen [:RyanVM UTC-5] from comment #13)
> (In reply to Frédéric Wang (:fredw) from comment #4)
> > These are just reftests so they only need to land in trunk.
>
> Any particular reason for that? Seems like the best way to verify a fix on a
> branch is to land a test for it :)
I just meant that only the code change was necessary to fix the security bug, but please ignore my comment and follow your usual procedures. (Also, the tests do not really verify the fix but only gives testcases that the fuzzer could have used to detect the issue...)
Comment 15•11 years ago
|
||
https://hg.mozilla.org/releases/mozilla-aurora/rev/9449a68dd30d
https://hg.mozilla.org/releases/mozilla-beta/rev/c6718f474d3f
https://hg.mozilla.org/releases/mozilla-b2g26_v1_2/rev/4fd893896d02
I'll land this on esr24 as a ride-along the next time I'm pushing there.
Comment 16•11 years ago
|
||
Comment 17•11 years ago
|
||
Updated•11 years ago
|
Whiteboard: [adv-main28-][adv-esr24.4-]
Updated•11 years ago
|
Whiteboard: [adv-main28-][adv-esr24.4-] → [adv-main28-][adv-esr24.4-][qa-]
Updated•11 years ago
|
status-b2g-v1.3T:
--- → fixed
Reporter | ||
Updated•10 years ago
|
Group: core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•