Mozilla B2G FTU Privacy Page Crash Vulnerability Analysis (Bug 964462)

From the screenshot, the following key information about the vulnerability can be obtained: Vulnerability Description: - Vulnerability ID: 964462 - Vulnerability Name: B2G FTU crash when accessing e.me privacy page (after opening marketplace privacy page) - Vulnerability Type: defect - Vulnerability Severity: critical Vulnerability Status: - Current Status: Closed Affected Scope: - Affected Products and Components: Core::XPCOM - Required Milestone: mozilla30 Tracking Tags: - Key Tags: blocking-b2g Fix Progress: - Submitted Patch Name: guess fix v2 - Fixer: sm, smaug:[smaug]\[bugs@pettay.fi\] Reproduction Steps: 1. make reset-gaia 2. enable abl e network connection 3. choose wifi (mzila guest in my case) 4. click on privacy link 5. open b2g privacy page 6. open marketplace privacy page 7. open e.me privacy page Investigation Analysis: - Possibly related to appcache storage struct in the "cache world", with specific code submission path also serving as the review path. - Vulnerability submission info: https://hg.mozilla.org/integration/mozilla-inbound/rev/41fbeb789ade Diagnostic Information: - Involves code related to nsCOMPtr and nsDOMOfflineResourceList - Related to cycle collection - Log details: gdb stack analysis and output of multiple related variable values Vulnerability Communication: Participants in discussion: Gregor Wagner, Olli Pettay, Ryan VanderMeulen, Andrew McCreight, and others. Numerous discussants; Accessories: 36 attachments document vulnerability-related information and progress on resolution approaches. Additional patch evaluation information has been added.

Goal Reached Thanks to every supporter — we hit 100%!

Mozilla B2G FTU Privacy Page Crash Vulnerability Analysis (Bug 964462)