989757 - Segfault when opening this pure-xhtml file.

Status: RESOLVED DUPLICATE of bug 862624

(Firefox :: Untriaged, defect)

Description

[nick_shadder]

Attachment: fifoCrashSegfault1.xhtml

User Agent: Opera/9.80 (Windows NT 6.1; Win64; x64) Presto/2.12.388 Version/12.16

Steps to reproduce:

Open the attached file. 
The file extension has to be xhtml or xml - if changed to html the crash does not occur. 
I tested it on win7 x64 and debian x64. 
On win7 the same crash occurs with Aurora and Nightly. 
Also crashes in safe mode. 
(I'm not a security expert, so I don't know if this can be exploited for remote code execution, but since I can't rule it out either, I checked the "users could be harmed" check box to be on the safe side.)


Actual results:

Firefox crashes due to a segmentation fault.


Expected results:

Expected rendering an empty page.

Comment 2

[Kevin Brosnan [Ex-Mozilla]]

Crashed on FxAndroid https://crash-stats.mozilla.com/report/index/00f43915-2158-448c-9399-912102140331

Comment 3

[David Chan [:dchan]]

Comment on attachment 8399107 [details]
fifoCrashSegfault1.xhtml

Crashed on Fx28 for me. I'm going to change the mimetype so other people do inadvertently crash when clicking the attachment.