← Back to team overview

desktop-packages team mailing list archive

[Bug 1398898]

 

This entirely depends on the type and number of parameters that are
passed.

Rule of thumb: as soon as a 64bit parameter appears in the call, it is
likely that this code will do the wrong thing. Depending on the use of
the parameters, effects could range from nothing to complete crash, with
memory corruption in between.

Hint: It probably wouldn't be too hard to turn this bug into an attack
vector.

But who really cares about security when such a bug is being ignored,
despite having been identified four months ago, with a proper fix
submitted for all of that time...

Cheers,

Marc.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1398898

Title:
  [armhf] segfaults when trying to save a file

Status in The Mozilla Firefox Browser:
  Fix Released
Status in firefox package in Ubuntu:
  Confirmed
Status in firefox source package in Precise:
  New
Status in firefox source package in Trusty:
  New
Status in firefox source package in Utopic:
  New
Status in firefox source package in Vivid:
  Confirmed
Status in iceweasel package in Debian:
  Confirmed

Bug description:
  I reproduced by:

  1) starting firefox on an armhf system
  2) browsing to http://us.archive.ubuntu.com
  3) right clicking on the "folder" image, clicking "Save Image As..."
  4) then selecting a folder. 

  ubuntu@hb06-22:/tmp$ firefox

  (process:23506): GLib-CRITICAL **: g_slice_set_config: assertion 'sys_page_size == 0' failed
  Gtk-Message: Failed to load module "canberra-gtk-module"

  (firefox:23506): LIBDBUSMENU-GLIB-WARNING **: Unable to get session
  bus: Failed to execute child process "dbus-launch" (No such file or
  directory)

  ### THIS IS WHERE I SELECT SAVE IMAGE AS ###

  
   1417625318797	GMPInstallManager.simpleCheckAndInstall	INFO	Last check was: 1417625319 seconds ago, minimum seconds: 86400
  1417625318798	GMPInstallManager._getURL	INFO	Using url: https://aus4.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VERSION%/%DISTRIBUTION%/%DISTRIBUTION_VERSION%/update.xml
  1417625318800	GMPInstallManager._getURL	INFO	Using url (with replacement): https://aus4.mozilla.org/update/3/GMP/33.0/20141013200607/Linux_arm-eabi-gcc3/en-US/release/Linux%203.13.0-37-generic%20(GTK%202.24.23)/canonical/1.0/update.xml
  1417625318805	GMPInstallManager.checkForAddons	INFO	sending request to: https://aus4.mozilla.org/update/3/GMP/33.0/20141013200607/Linux_arm-eabi-gcc3/en-US/release/Linux%203.13.0-37-generic%20(GTK%202.24.23)/canonical/1.0/update.xml
        
  (firefox:23506): Gtk-WARNING **: Attempting to store changes into `/home/ubuntu/.local/share/recently-used.xbel', but failed: Failed to create file '/home/ubuntu/.local/share/recently-used.xbel.ECJTPX': No such file or directory

  (firefox:23506): Gtk-WARNING **: Attempting to set the permissions of `/home/ubuntu/.local/share/recently-used.xbel', but failed: No such file or directory
  ubuntu@hb06-22:/tmp$

To manage notifications about this bug go to:
https://bugs.launchpad.net/firefox/+bug/1398898/+subscriptions


References