BinaryPath.h fails to sanitize the path when a user launches Firefox as follows: 1. In Terminal, cd to Contents/MacOS 2. Run ./firefox This is due to the fact that BinaryPath::Get does not sanitize the path on OSX. The returned path in this scenario would be: Contents/MacOS/./firefox XPCOMGlueLoad would then manipulate this path to find the dependentlibs.list file as follows: 1. Remove executable from path: Contents/MacOS/. 2. Remove last path component: Contents/MacOS 3. Add 'Resources' path component: Contents/MacOS/Resources The resulting path should have been Contents/Resources. The above path will fail and result in a "Couldn't load XPCOM" error.

Note that this used to work before the v2 signature changes because all files were in the same directory (Contents/MacOS), so a path of Contents/MacOS/./dependentlibs.list used to work.

Comment on attachment 8500601 [details] [diff] [review] Patch Looks fine to me.

https://hg.mozilla.org/projects/oak/rev/f4c31beca62b Inbound and fx-team is currently closed. Setting checkin-needed just in case.

This change introduced a serious regression for me, as now I can't start firefox at all. see bug 1079655

Landed on aurora in the Mac V2 signing combined patch in bug 1047584