[tbb-bugs] #8981 [Tor Browser]: Segfault after extended use in imgCacheValidator::OnStartRequest (mRequest is null when channelURI is non-null)

[Tor Bug Tracker & Wiki]

#8981: Segfault after extended use in imgCacheValidator::OnStartRequest (mRequest
is null when channelURI is non-null)
-------------------------------------+-------------------------------------
 Reporter:  Superfluous              |          Owner:  tbb-team
     Type:  defect                   |         Status:  new
 Priority:  High                     |      Milestone:  TorBrowserBundle
Component:  Tor Browser              |  2.3.x-stable
 Severity:  Normal                   |        Version:
 Keywords:  tbb-crash, tbb-firefox-  |     Resolution:
  patch                              |  Actual Points:
Parent ID:                           |         Points:
  Sponsor:                           |
-------------------------------------+-------------------------------------
Changes (by cypherpunks):

 * severity:   => Normal


Comment:

 Notes for history purpose: Superfluous sent this bug to Bugzilla. It's
 [https://bugzilla.mozilla.org/show_bug.cgi?id=876568 Bug 876568], alas
 "This bug does not meet the ESR landing criteria" and marked as
 unconfirmed.

 Anyway, it was addressed later by
 [https://bugzilla.mozilla.org/show_bug.cgi?id=1148640 Bug 1148640]:
 >  Bail if OnStartRequest is delivered more than once to imgCacheValidator
 It was for Target Milestone: mozilla39, and [https://mxr.mozilla.org
 /mozilla-esr38/source/image/src/imgLoader.cpp#2559 seems like fixed] for
 ESR-38 as well.

 This ticket should be resolved as fixed.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8981#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online