Closed Bug 331889 (randomclasses) Opened 19 years ago Closed 3 years ago

[meta] Bugs found with "Random Classes" (adding random CSS stylesheets)

Categories

(Core :: Fuzzing, defect)

Product:
Core
Component:
Fuzzing
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED INACTIVE

People

(Reporter: jruderman, Unassigned)

References

(Depends on 35 open bugs)

Details

(Keywords: meta, sec-other, Whiteboard: [sg:nse] meta)

Attachments

(6 obsolete files)

Random Classes sort of a successor to Random Styles, but it's different enough that it gets its own bug. Big new things: * Test pseudo-elements such as :before, :first-line, ::-moz-column-content, ::-moz-table-row-group. * Test more CSS properties, including direction, letter-spacing, opacity, z-index, and columns. * Test animated GIFs (as backgrounds and generated content). * Bookmarklet source and recorder all in one script. (When the fifth parameter is 0, it makes changes to the document forever; when it is positive, it records that many changes without actually making them.) * The script (including the recorder) now works in Safari too. Several CSS properties and psuedo-elements that cause lots of known crashes (e.g. float) are commented out. As usual, * You can the Brainjar Crunchinator to make it into a bookmarklet. * Lithium (bug 329066) can help reduce crashing / hanging / leaking testcases. * This bug is security-sensitive because I've found several [sg:critical] security holes with the Random Classes code and expect to find more.
Alias: randomclasses
Whiteboard: [sg:nse] meta
Attached file Random Classes 1.0 (obsolete) (deleted) —
Depends on: 334105
Depends on: 334107
Depends on: 334132
Depends on: 334147
Depends on: 334148
Depends on: 323497
Depends on: 335140
Attached file Random Classes 1.1 (obsolete) (deleted) —
* Un-comment 'float' and 'clear' properties, now that bug 282173 is fixed. * Add 'white-space' property.
Attachment #216450 - Attachment is obsolete: true
Depends on: 339651
Attached file Random Classes 1.2 (requires fuzz.js) (obsolete) (deleted) —
Attachment #219528 - Attachment is obsolete: true
I don't think I changed much in Random Classes when I converted it to use fuzz.js (bug 339948).
Depends on: 340093
Attached file Random Classes 2.0 (obsolete) (deleted) —
Attachment #224053 - Attachment is obsolete: true
Random Classes 2.0 * Update for fuzz.js 2.0. * Stop trying to use anonymous box selectors, now that bug 331883 is fixed.
Depends on: 342929
Depends on: 343206
Depends on: 345139
Depends on: 348977
Depends on: 348982
Depends on: 349095
Depends on: 355986
Depends on: 355989
Depends on: 355993
Attached file Random Classes 3.0 (obsolete) (deleted) —
Attachment #226749 - Attachment is obsolete: true
Depends on: 360339
Shouldn't have security bugs assigned to nobody. Jesse can own his test bugs
Assignee: nobody → jruderman
Depends on: 366967
Depends on: 367015
Depends on: 367243
Depends on: 367246
Depends on: 367489
Depends on: 367504
Depends on: 367587
Depends on: 367650
Depends on: 367673
Attached file Random Classes 3.01 (obsolete) (deleted) —
Adds -moz-float-edge, counter-increment, quotes, and more. -moz-column-* commented out.
Attachment #242971 - Attachment is obsolete: true
Depends on: 368451
Depends on: 369971
Comment on attachment 252267 [details] Random Classes 3.01 New version in bug 339948.
Attachment #252267 - Attachment is obsolete: true
Depends on: 372237
Depends on: 376137
Depends on: 378413
Depends on: 379799
Depends on: 380012
Depends on: 380101
Depends on: 380116
Depends on: 380217
Depends on: 383129
Depends on: 383872
Depends on: 383887
Depends on: 384491
Depends on: 384499
Depends on: 384649
Depends on: 385132
Depends on: 385226
Depends on: 385295
Depends on: 385445
Depends on: 385866
Depends on: 385880
Depends on: 386010
Depends on: 386266
Depends on: 386475
Depends on: 386799
Depends on: 386812
Depends on: 386827
Depends on: 387195
Depends on: 387201
Depends on: 387217
Depends on: 387219
Depends on: 387358
Depends on: 387754
Depends on: 388367
Depends on: 388374
Depends on: 388709
Depends on: 388715
Depends on: 389014
Depends on: 389630
Depends on: 390762
Depends on: 390976
Depends on: 391053
Depends on: 391894
Depends on: 391901
Depends on: 393325
Depends on: 393517
Depends on: 393661
Depends on: 393758
Depends on: 393923
Depends on: 395316
Depends on: 395450
Depends on: 395469
Depends on: CVE-2008-5501
Depends on: 397022
Depends on: 397187
Depends on: 397293
Depends on: 397304
Depends on: 397448
Depends on: 397844
Depends on: 398042
Depends on: 398510
Depends on: 398803
Depends on: 399132
Depends on: 399209
Depends on: 399219
Depends on: 399692
Depends on: 399712
Depends on: 399843
Depends on: 400078
Depends on: 400789
Depends on: 401589
Depends on: 402307
Depends on: 402380
Depends on: 402384
Depends on: 403129
Depends on: 403134
Depends on: 403175
Depends on: 403177
Depends on: 403245
Depends on: 403569
Depends on: 403997
Depends on: 404123
Depends on: 404219
Depends on: 404301
Depends on: 405187
Depends on: 405271
Depends on: 408450
Depends on: 408493
Depends on: 409461
Depends on: 410232
Depends on: 410233
Depends on: 411319
Depends on: 411582
Depends on: 412479
Depends on: 412543
Depends on: 412651
Depends on: 413016
Depends on: 413028
Depends on: 413185
Depends on: 413292
Depends on: 413388
Depends on: 413582
Depends on: 413587
Depends on: 414061
Depends on: 414175
Depends on: 418532
Depends on: 420031
Depends on: 420654
Depends on: 421203
Depends on: 422015
Depends on: 422283
Depends on: 424679
Depends on: 425981
Depends on: 429805
Depends on: 429865
Depends on: 429968
Depends on: 429969
Depends on: 430344
Depends on: 430356
Depends on: 430991
Depends on: 431072
Depends on: 435529
Depends on: 436470
Depends on: 436822
Depends on: 436982
Depends on: 436996
Depends on: 438259
Depends on: 444726
Depends on: 444861
Depends on: 444967
Depends on: 448083
Depends on: 448488
Depends on: 448615
Depends on: 448988
Depends on: 448996
Depends on: 450311
Depends on: 451317
Depends on: 453935
Depends on: 454751
Depends on: 455623
Depends on: 455976
Depends on: 457362
Depends on: 457380
Depends on: 458453
Depends on: 458653
Depends on: 458659
Depends on: 459666
Depends on: 459883
Depends on: 460349
Depends on: 460389
Depends on: 460910
Depends on: 460924
Depends on: 461239
Depends on: 461907
Depends on: 462392
Depends on: 462788
Depends on: 463350
Depends on: 463763
Depends on: 464374
Depends on: 466756
Depends on: 467137
Depends on: 467141
Depends on: 468546
Depends on: 468555
Depends on: 468557
Depends on: 469859
Depends on: 469861
Depends on: 470167
Depends on: 471360
Depends on: 472227
Depends on: 472617
Depends on: 472774
Depends on: 472919
Depends on: 472950
Depends on: 473481
Depends on: 475136
Depends on: 475193
Depends on: 475302
Depends on: 476241
Depends on: 476245
Depends on: 477333
Depends on: 477569
Depends on: 477731
Depends on: 477935
Depends on: 478131
Depends on: 478185
Depends on: 478527
Depends on: 479938
Depends on: 482375
Depends on: 482398
Depends on: 486428
Depends on: 488325
Depends on: 489462
Depends on: 489691
No longer depends on: 489691
Depends on: 489691
Depends on: 490747
Depends on: 492163
Depends on: 493123
Depends on: 493402
Depends on: 493910
Depends on: 495892
Depends on: 496062
Depends on: 498698
Depends on: 499848
Depends on: 499857
Depends on: 500532
Depends on: 505111
Depends on: 508919
Depends on: 509155
Depends on: 509749
Depends on: 512851
Depends on: 513110
Depends on: 513397
Depends on: 513732
Depends on: 514784
Depends on: 521380
Depends on: 522170
Depends on: 522516
Depends on: 534366
Depends on: 534367
Depends on: 535911
Depends on: 536242
Depends on: 536721
Depends on: 537059
Depends on: 547338
Depends on: 550306
Depends on: 558943
Depends on: 566168
Depends on: 571758
Depends on: 573909
Depends on: 584590
Depends on: 588158
Depends on: 588237
Depends on: 610482
Depends on: 616250
Depends on: 628358
Depends on: 643853
Depends on: 664927
Depends on: 668941
Depends on: 670226
Depends on: 693496
Depends on: 693523
Depends on: 698335
Depends on: 699360
Depends on: 717514
Depends on: 770381
Depends on: 790873
Depends on: 796115
Depends on: 812824
Depends on: 812929
Depends on: 822766
Depends on: 822906
Depends on: 822910
Depends on: 824297
Depends on: 826483
Depends on: 826532
Depends on: 826978
Depends on: 827219
Depends on: 827239
Depends on: 827687
Depends on: 839927
Depends on: 840818
Depends on: 841174
Depends on: 842309
Depends on: 844628
Depends on: 847208
Depends on: 847209
Depends on: 852293
Depends on: 852397
Depends on: 861118
Depends on: 861489
Depends on: 862947
Depends on: 864972
Depends on: 866588
Depends on: 873172
Depends on: 876074
Depends on: 879139
Depends on: 884212
Depends on: 898926
Depends on: 914012
Depends on: 914919
Depends on: 918994
Depends on: 926717
Depends on: 944195
Depends on: 948181
Depends on: 949889
Depends on: 973701
Depends on: 979468
Depends on: 1001233
Depends on: 1022792
Depends on: 1028511
Depends on: 1043156
Depends on: 1071823
Depends on: 1072130
Depends on: 1133615
Depends on: 1153693
Depends on: 1157119
Depends on: 1157918
Depends on: 1161320
Depends on: 1169423
No longer blocks: fuzz
Depends on: 1187213
https://github.com/MozillaSecurity/funfuzz/blob/master/dom/fuzzer/modules/style-sheets.js
Group: core-security
Summary: Bugs found with "Random Classes" → Bugs found with "Random Classes" (adding random CSS stylesheets)
Depends on: 1222892
Depends on: 1223694
Depends on: 1227498
Depends on: 1227501
Depends on: 1235489
Depends on: 1267079
Depends on: 1278463
Component: Tracking → Platform Fuzzing Team
Summary: Bugs found with "Random Classes" (adding random CSS stylesheets) → [meta] Bugs found with "Random Classes" (adding random CSS stylesheets)

The bug assignee didn't login in Bugzilla in the last 7 months.
:decoder, could you have a look please?
For more information, please visit auto_nag documentation.

Assignee: jruderman → nobody
Flags: needinfo?(choller)
Status: NEW → RESOLVED
Closed: 3 years ago
Flags: needinfo?(choller)
Resolution: --- → INACTIVE
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: