[Webkit-unassigned] [Bug 20267] Crash on some pages due to a plugin

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Aug 20 01:11:51 PDT 2008


https://bugs.webkit.org/show_bug.cgi?id=20267


zuh at iki.fi changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #22892|                            |review?
               Flag|                            |




------- Comment #1 from zuh at iki.fi  2008-08-20 01:11 PDT -------
Created an attachment (id=22892)
 --> (https://bugs.webkit.org/attachment.cgi?id=22892&action=view)
Fix handling of badly formatted and empty plugin mime descriptions

The backtrace looks to be the same crash I encountered with the new Maemo
release (Diablo), which was due to the Nokia's browser plugin including a
trailing '; ' in their return value for NP_GetMIMEDescription().

The GTK+ PluginPackage code first splits by ';', then by ':' and assumes that
the latter always succeeds to find three elements and thus crashing when
there's less.

The patch fixes it to only accept well-formatted (ie. three elements separated
by ':' for each ';' block) mime descriptions. 


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list