Closed Bug 1786010 Opened 2 years ago Closed 2 years ago

Crash [@ mozilla::net::Http2Session::ResponseHeadersComplete] with HTTP/2 Proxy

Categories

(Core :: Networking: HTTP, defect)

x86_64
Linux
defect

Tracking

()

RESOLVED DUPLICATE of bug 1786009
Tracking Status
firefox105 --- wontfix

People

(Reporter: decoder, Unassigned)

References

Details

(Keywords: crash, regression, testcase)

Crash Data

Attachments

(2 files)

The attached testcase crashes on mozilla-central revision 20220818-6502583dede7 (build with (metadatabuildFlags not available)).

For detailed crash information, see attachment.

To reproduce the issue, perform the following steps:

  1. Download the attached testcase, save as "test.bin".
    2a. Build with --enable-fuzzing (requires Clang and ASan, also build gtests using ./mach gtest dontruntests).
    2b. Alternatively you can download builds from TC using python -mfuzzfetch -a --fuzzing --target firefox gtest (see https://github.com/MozillaSecurity/fuzzfetch).
  2. Run FUZZER=NetworkHttp2ProxyHttp2 objdir/dist/bin/firefox test.bin
Attached file Detailed Crash Information (deleted) —
Attached file Testcase (deleted) —

:decoder, since this bug is a regression, could you fill (if possible) the regressed_by field?
For more information, please visit auto_nag documentation.

Flags: needinfo?(choller)

This has the same root cause as bug 1786009, so I'd like to make this a dup.

Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → DUPLICATE
Flags: needinfo?(choller)
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: