Release Notes | Fixed Security Issues | FTP
Bugs fixed for Firefox 2.0.0.1: ~183 in total (~42 crashers, ~3 memory leaks, ~41 regressions and ~4 privacy-related bugs.)
General Landings
220900 [Core:Editor]-Focus breaks, cut/copy/paste and other focus-dependent tasks broken [All]
286179 [Firefox:Build Config]-make parallel builds possible on Windows using MSVC [Win]
292833 [Core:XBL]-crash if i press any function key after i removed a parent of an xbl binding, where the binding has a keyset. [All]
295306 [Core:XPCOM]-Firefox is unusable in solaris x86 using Sun SOS10 compiler. [Sol]
307400 [Firefox:Startup and Profile System]-Scrolling profiles in Profile Manager broken on other than English build when there are 6 profiles [All]
308778 [Core:Plug-ins]-setting fantasy football sportsline.com [@ MimeTypeArrayImpl::GetMimeTypes] [Win]
312363 [Core:Security: UI]-document.write into iframe results in broken-lock icon (bankhapoalim.co.il incorrectly indicated as only partially encrypted) [Win]
322625 [Core:Frame Construction]-Slightly improve handling of positioned kids of MathML [All]
328346 [Core:Security: PSM]-Certificates with keyusage nonRepudiation should not be used as SSL client certificates [Win]
328988 [Core:Spelling checker]-kill builtinURLs.rdf [All]
329399 [Core:HTML: Parser]-Crash with iExploder test 10050419 [@ js_AllocStack] [All]
330456 [Core:XP Toolkit/Widgets: Menus]-evil XUL with within makes browser crash [@ nsMenuFrame::DoLayout] [All]
335047 [Core:Parser]-Fix topcrash [@ nsExpatDriver::ParseBuffer] [All]
337889 [Core:Style System (CSS)]-crash [@ nsCSSDocumentRule::URL::URL] [Win]
339494 [Core:Xul]-(undisclosed fix) [All]
340969 [Toolkit:Satchel]-crash at [@ nsFormFillController::GetTextValue] [Win]
344812 [Core:Security: UI]-string ID typo in CertViewer: fix display of KU_CRL_SIGN key usage bit [All]
347513 [Core:Widget: Win32]-When switching windows, current window stays in front of display (even when it loses focus, as expected) [Win]
347875 [Core:Widget: Win32]-Support WM_MOUSEHWHEEL for tilt wheel mouse [Win]
348304 [Core:Xul]-(undisclosed fix) [All]
349319 [Core:Spelling checker]-If you have both the en-GB and the en-GB-oed dictionaries installed you can’t distinguish them when trying to select the correct dictionary [All]
351310 [Core:Keyboard: Navigation]-Use unshifted charCode/keyCode for accesskey handling [All]
351491 [Core:Keyboard: Navigation]-first click in a window does not follow a link with caret browsing on [All]
351744 [Other Applications:DOM Inspector]-Memory leak in |inFileSearch::SetFilenameCriteria| (inFileSearch.cpp) [All]
353141 [Firefox:Preferences]-In Options/Preferences window, Globe (Content) icon image has top and right cutoff. [All]
353918 [Firefox:Extension/Theme Manager]-No updates available notification does not go away when switching the view [All]
354133 [Core:Frame Construction]-Make the block part of an {ib} split have a space manager if it needs to [All]
354711 [Core:XPCOM]-Crash when accessing images.length [All]
355046 [Core:Event Handling]-Crash [@ nsCOMPtr_base::~nsCOMPtr_base] when dragging splitter which gets removed during that time [Win]
355059 [Core:GFX: Gtk]-valgrind free memory read warning from multiple FT_Done_Face calls in nsFontMetricsPS.cpp [Lin]
355151 [Core:XML]-XML-RPC fails with “XMLHttpRequest is not defined” due to assuming namespace pollution [All]
355179 [Core:Widget]-Vista - Sets the current process as dpi aware [Win]
355195 [Firefox:General]-”temporary testing assertions” that were supposed to be disabled before the release haven’t been disabled [All]
355291 [Firefox:History]-Recently Closed Tabs > Open All In Tabs throws exceptions when Always Display Tab Bar is enabled. [All]
355395 [Core:Printing]-Misspelled words in text areas cause all following text to disappear during print. [All]
355399 [Firefox:Phishing Protection]-unclean shutdown while safe browsing initializes (makes zombies) [All]
355993 [Core:MathML]-[FIX]Crash [@ nsIFrame::GetPositionIgnoringScrolling] with MathML table, position: fixed [All]
356017 [Firefox:Microsummaries]-Clicking twice ‘OK’ needed for creating a bookmark with microsummary [All]
356355 [Firefox:Phishing Protection]-numeric domain normalization only happens on enchash table values [All]
356463 [Firefox:Bookmarks]-add X-Moz: livebookmark to http request when doing live bookmark refreshes [All]
356694 [Core:Plug-ins]-Flash doesn’t work on Intel Macs, problems with “Flash Player Enabler.plugin” (which is PowerPC) [Mac]
357109 [Firefox:Search]-Invalid search engine update URLs may cause an assertion dialog each time an update check occurs [All]
357333 [Core:Security: PSM]-Branches only: build using a supported NSS 3.11 tag [All]
358015 [Firefox:Menus]-Release notes can’t be opened from source viewer/bookmarks manager [All]
358128 [Core:Networking]-HTML injection in gopher dir listing (”xxs in Firefox 2.0?”) [All]
358558 [Core:XPCOM]-R_386_PC32 relocations in libtracemalloc.so when building on FC6 [Lin]
358559 [Core:XPCOM]-R_386_PC32 relocations in libxul.so when building on FC6 [Lin]
358720 [Core:Disability Access APIs]-Crash [@ nsAccessibilityService::GetAccessible] [All]
358741 [Core:XP Toolkit/Widgets: XUL]-Crash [@ nsListBoxBodyFrame::GetListItemContentAt] [All]
358891 [Firefox:Search]-Firefox doesn’t remember the search engine with non-ascii characters as its selected engine [All]
358953 [Core:General]-visibility patches for 1.8 branch [Lin]
359882 [Core:Preferences: Backend]-autoconfig e-mail address detection doesn’t work with multiple identities [Win]
360293 [Canvas]-Add helper macros for argument checking [All]
360579 [Core:Tabbed Browser]-[FIX]Fix for bug 326009 doesn’t work quite right with more than 2 tabs [Lin]
360743 [Firefox:Build Config]-Add Kurdish and Georgian to the Firefox build [All]
360869 [Core:SVG]-text-anchor=’middle’ does not work with text content added via certain scripts [Win]
DOM Landings
317078 [Core:DOM: Events]-onchange event not fired for single selection single line SELECT elements first OPTION, if there was previously no selection made (selectedIndex == -1) [All]
353022 [Core:DOM]-leak when loading google firefox homepage, clicking bookmark, and closing window [Lin]
353090 [Core:DOM]-Memory leak on google personalized home page [All]
355221 [Core:DOM]-All Firefox windows closes suddenly (crash) if I load the page [@ 0x042b682f] [@ nsGenericHTMLElement::BindToTree] [All]
355482 [Core:DOM]-Allow window.focus (raise/lower windows) on other windows at times when popups are allowed [All]
356474 [Core:DOM]-[FIX]Scam Site (w/ Frames) not redirecting [All]
358755 [Core:DOM]-crash [@ nsDOMClassInfo::PreCreate] when going back [All]
358723 [Core:DOM: HTML]-Crashes [@ nsHTMLDocument::GetCookie] [All]
358797 [Core:DOM: Traversal-Range]-range.createContextualFragment() crash when range node is DocType [All]
Layout Landings
311143 [Core:Layout: Canvas]-Building with sun linker rather than gnu linker on solaris causes “elf” failures. [Sol]
312963 [Core:Layout: Block and Inline]-crash when * {-moz-column-width:20em; -moz-column-gap:2em;} [@ ReparentFrame] [All]
318592 [Core:Layout]-[FIX]Crash with evil testcase, using float:right; and .u::first-letter { letter-spacing: 50px; } [@ nsQuoteList::Calc] [@ nsQuoteNode::DepthAfter] [@ nsCSSFrameConstructor::RemoveFirstLetterFrames] [All]
330909 [Core:Layout: R & A Pos]-GetAbsoluteContainingBlock() is broken [Win]
348510 [Core:Layout]-[FIX]Crash with iExploder test 243244 [@ nsHTMLReflowState::ComputePadding] [Win]
350267 [Core:Layout]-More CantRenderReplacedElement hackery [All]
350444 [Core:Layout: Tables]-[FIX]Vertical borders in table containing col elements are not shown [All]
351225 [Core:Layout]-Crash [@ nsIView::Destroy ] on print preview with The New York Times [All]
354144 [Core:Layout]-[FIX] position:absolute is broken [All]
354451 [Core:Layout: Fonts and Text]-reprise bug 96423 : german character ß - buggy capitalization (text-transform: uppercase) [All]
354489 [Core:Layout]-[FIX]Crash [@ nsBlockBandData::Init] with mathml:mtable in xul [All]
354510 [Core:Layout]-[FIX]Crash [@ nsBlockBandData::Init] when moving mathml:geq inside html:span with display:table with removed mathml.css rule [All]
355869 [Core:Layout: Canvas]-Invalid read in nsCanvasRenderingContext2D::ContextState::ContextState [Lin]
359203 [Core:Layout]-(undisclosed fix) [All]
360642 [Core:Layout]-(undisclosed fix) [All]
361058 [Core:Layout]-gcc2.95.3 fails to compile nsListBoxBodyFrame.cpp [BeO]
RSS Landings
347897 [Firefox:RSS Discovery and Preview]-view source on feeds preview shows contents of wrong page [All]
350949 [Firefox:RSS Discovery and Preview]-Feed preview leaks memory [Mac]
355332 [Firefox:RSS Discovery and Preview]-Feed sniffing ignores content-disposition, displays “attachment” in the browser [All]
358878 [Firefox:RSS Discovery and Preview]-Feed preview’s request for favicon.ico should not send Referer [All]
361230 [Firefox:RSS Discovery and Preview]-Add a way to tell the parser the feed has been sniffed [All]
361531 [Firefox:RSS Discovery and Preview]-Ampersands in URL aren’t escaped when inserted in generated base attribute [Win]
JavaScript Engine Landings
336731 [Core:JavaScript Engine]-Do more checking when calling watch handlers. [All]
347248 [Core:JavaScript Engine]-Optimizing the stack property of error objects [All]
347306 [Core:JavaScript Engine]-toSource of long functions seems O(n^2). [All]
350256 [Core:JavaScript Engine]-apply can’t accept parameter arrays larger than 65534 [All]
352064 [Core:JavaScript Engine]-Error finalizing JS objects causes LiveConnect crash [All]
352455 [Core:JavaScript Engine]-JS engine stops execution trying to uneval an object w/ some non-function getters/setters [All]
352742 [Core:JavaScript Engine]-Array.filter on object {valueOf: Function} halts JavaScript execution [All]
352797 [Core:JavaScript Engine]-”Assertion failure: OBJ_GET_CLASS(cx, obj) == &js_BlockClass” with xml filtering predicate operator, eval.call, let [All]
354978 [Core:JavaScript Engine]-Make the pseudo frame look even more like a real one. [All]
354982 [Core:JavaScript Engine]-Cleaning up iterator implementation [All]
355023 [Core:JavaScript Engine]-destructuring assignment (group assignment) optimized too much [All]
355049 [Core:JavaScript Engine]-decompilation of for..in destructuring into two holes causes “Assertion failure: pos != 0″ [All]
355105 [Core:JavaScript Engine]-”Assertion failure: count > 0″ with “catch([] if true)” [Mac]
355161 [Core:JavaScript Engine]-Function.prototype disappears after several seconds of browser’s work. (chrome) [Win]
355339 [Core:JavaScript Engine]-”Assertion failure: sprop->setter != js_watch_set” setting watch after unwatch [All]
355344 [Core:JavaScript Engine]-Exceptions thrown by watchpoint show up in the next call to “eval” [All]
355556 [Core:JavaScript Engine]-Crash [@ js_Interpret] with “arguments” as second param to eval [All]
355635 [Core:JavaScript Engine]-”Assertion failure: top printer->script->depth” with “let” that binds nothing [All]
355832 [Core:JavaScript Engine]-”Assertion failure: OBJ_GET_CLASS(cx, obj)->flags & JSCLASS_HAS_PRIVATE” or null deref [@ js_FindProperty] with “let” that binds nothing [All]
355992 [Core:JavaScript Engine]-”Assertion failure: strncmp(rval, js_function_str, 8) == 0 && rval[8] == ‘ ‘” with non-function setter [All]
356085 [Core:JavaScript Engine]-Incorrect uneval of object with named getter function; property and function names are mashed together [All]
356238 [Core:JavaScript Engine]-(undisclosed fix) [All]
356250 [Core:JavaScript Engine]-”Assertion failure: !fp->fun || !(fp->fun->flags & JSFUN_HEAVYWEIGHT) || fp->callobj” [All]
356402 [Core:JavaScript Engine]-(undisclosed fix) [All]
356693 [Core:JavaScript Engine]-Move pn_op forcing into the code generator. [All]
357063 [Core:JavaScript Engine]-(undisclosed fix) [All]
357169 [Core:JavaScript Engine]-GC temp roots cleanup [All]
357388 [Core:JavaScript Engine]-js_SweepScopeProperties can leave a JSScopeProperty with dangling parent pointer [All]
357392 [Core:JavaScript Engine]-jsdtoa.c - locks not released in some error cases [Win]
357398 [Core:JavaScript Engine]-js_ExpandErrorArguments can crash in OOM conditions [All]
357754 [Core:JavaScript Engine]-Top-level closures don’t see let-bound variables [All]
358183 [Core:JavaScript Engine]-XML equality does not compare all attributes [All]
358192 [Core:JavaScript Engine]-Make sure that Out-of-Memory during exception initialization is properly propagated. [All]
358965 [Core:JavaScript Engine]-XMLList.prototype.contains() no longer work [All]
358975 [Core:JavaScript Engine]-Silent failure on Out-of-Memory in Function constructor [All]
359062 [Core:JavaScript Engine]-Accessing a generator’s local variables from nested functions is broken [All]
360612 [Core:JavaScript Engine]-GC can leave GSN cache pointing to destroyed script [All]
360969 [Core:JavaScript Engine]-This page crashes SpiderMonkey [@ js_LookupPropertyWithFlags] [All]
361273 [Core:JavaScript Engine]-Assert fail: cg->stackDepth >= 0, at jsemit.c:164 [All]
361274 [Core:JavaScript Engine]-embedded nulls in Javascript object property names not allowed? [All]
361346 [Core:JavaScript Engine]-Mark our saved setter in case we have the last reference to it. [All]
361360 [Core:JavaScript Engine]-”Assertion failure: !caller || caller->pc” in obj_eval involving setter and watch [All]
361362 [Core:JavaScript Engine]-js/src/jsemit.c assumes sizeof(int) == sizeof(ptrdiff_t) [Net]
361467 [Core:JavaScript Engine]-Crash [@ js_watch_set] with certain watcher functions [All]
