Release Notes | Fixed Security Issues | FTP
Bugs fixed for Firefox 2.0.0.12: ~90 in total (~20 crashers, ~18 regressions, ~1 privacy-related bugs and ~16 that were locked and had no check-in comment.)
General
152156 [Core:XP Toolkit/Widgets: Menus]-filepicker dialog freezes mozilla redraw [BeO]
185946 [Core:XP Toolkit/Widgets]-filepicker crashes Mozilla on second press of Open/Browse buttons on web-pages [BeO]
197052 [Core:DOM: HTML]-crash if modification innerHTML of element in this element [@ js_EmitTree ] [All]
279505 [Core:DOM: Events]-Crash in pop-up window on parent.close() due to double free. [@ nsCSSFrameConstructor::RestyleEvent::HandleEvent] [All]
312018 [Core:Printing]-Page with “long” title saved as PDF as “Untitled.pdf” [Mac]
314432 [Core:Plug-ins]-Get rid of TVector glue in Default Plugin on Mac/Intel [Mac]
314874 [Core:JavaScript Engine]-Function.call/apply pass thisArg.valueOf() as the this value when thisArg is not a primitive value [Win]
326035 [Core:Widget: Cocoa]-Page Up and Page Down do not hide cursor [Mac]
342511 [Core:Spelling checker]-correcting another word (with spell checker) doesn’t cause current word to be spell-checked [All]
343987 [Core:GFX: BeOS]-[BeOS] Rendering context and other gfx rework [BeO]
346994 [Firefox:File Handling]-Remove leading dot (period) (.) from suggested filename for saving (save file) [All]
367538 [Firefox:Phishing Protection]-Firefox Phishing Protection bypass [All]
368864 [Mozilla Application Suite:General]-Menu selection is invisible in SeaMonkey 1.1 on Warp 3 [OS/]
372075 [Core:XPConnect]-Run toString inside the sandbox. [All]
375344 [Core:JavaScript Engine]-accessing prototype of DOM objects throws uncatchable error [Win]
376473 [Firefox:Security]-[mz2] file action dialog controls vulnerable to refocus race [All]
376976 [Core:History: Global]-Crash [@ nsGlobalHistory::IsURLInHistory] null pointer dereference [All]
381291 [Firefox:General]-Stephen Donner’s name is misspelled in credits.xhtml [Win]
384304 [Firefox:Startup and Profile System]-/usr/bin/firefox is not able to handle symlinks due to error in script [Lin]
386695 [Core:XPConnect]-Use the current scope to create exceptions [All]
387258 [Core:File Handling]-plain text txt file viewing capability lost after having downloaded a txt file with content-disposition: attachment and content-type: plain/text [All]
387591 [Core:JavaScript Engine]-JS_GetScopeChain asserts because of native functions [Lin]
390597 [Core:Javascript]-Clean up after ourselves to avoid dangling pointers. [All]
391019 [Core:File Handling]-commandline for external protocol handler is mishandled [OS/]
393141 [Core:Accessability]-Crash in accessibility service with display:none inside optgroup [All]
394610 [Toolkit:PasswordManager]-Add checks for problematic whitespace. [All]
397427 [Core:CSS]-Make the “href” property of stylesheets reflect the original URI that was reflected to load the sheet. [All]
398499 [Core:Widget: Mac]-Crash in DispatchEventToHandlers(EventTargetRec*, OpaqueEventRef*, HandlerCallRec* [Mac]
398668 [Core:XBL]-[FIX]Crash [@ JS_GetPrivate] with binding with destructor, setting javascript disabled, reloading and going back [Win]
399298 [Core:XPConnect]-Sync trunk and branch versions of XPCNativeWrapper [All]
400556 [Core]-Tear down editor a little earlier [All]
401113 [Firefox:Session Restore]-Scrollbar position not always restored after recovering from crash [Win]
401608 [Firefox:Software Update]-updater.exe will crash on windows if you only specify 2 args [Win]
402150 [Core:DOM]-Buffer overrun [@ nsDocument::RetrieveRelevantHeaders] at provided URL [Win]
402349 [Firefox:Session Restore]-”aTabData.entries.forEach is not a function” error in nsSessionStore.js on call to getBrowserState function [All]
402550 [Firefox:OS Integration]-Change needed for ARM hardware platform for QNX (Photon) port [Neu]
402649 [Core:DOM]-[FIX]window.location race condition can be used to spoof referer header [All]
403090 [Core:Search]-[FIX]Found text is no longer highlighted within INPUT text fields and TEXTAREAs [All]
403164 [Camino:General]-Add Sparkle license to about:license on branch and trunk [Mac]
404252 [Core:Parser]-Don’t treat backspace as whitespace as per the HTML4 spec [All]
404375 [Firefox:Extension/Theme Manager]-Recover from ‘needs restart’ message caused by bug 396695 [Win]
405818 [Core:Style System (CSS)]-[FIX]Opening about:config results in warning about unresponsive script [All]
406036 [Core:Canvas]-Canvas cleanup [All]
406214 [Core:XP Toolkit/Widgets]-Dialogs with checkbox have focus on checkbox rather than on the default button [Win]
406555 [Core:JavaScript Engine]-the decompiler should not depend on JS_C_STRINGS_ARE_UTF8 [All]
407303 [Core:Embedding: Docshell]-Getting “Unsafe File Type” error when accessing a site that does not exist. [All]
407635 [Firefox:General]-Update browser/toolkit copyright dates to 2008 [All]
407800 [Firefox:OS Integration]-Port generic/automatic remoting changes to QNX Neutrino [Neu]
407842 [Core:GFX: Gtk]-Crash with very large font-size (XIOError exit) [Lin]
[*">408164 [Firefox:Safebrowsing]-Web forgery warning not shown until tab switch [All]
408256 [Core:ImageLib]-Use a constant-size buffer in BMP decoder to reduce fragmentation [All]
408257 [Core:Plug-ins]-script timer not being reset when Microsoft Silverlight plug-in fires event callbacks to Javascript. [All]
409066 [Core:GFX: Mac]-sNativeRegionPool visibility is wrong in libgkgfx [Mac]
410566 [Core:Widget: OS/2]-Filter ..apps in file picker when searching for helper applications on OS/2 [OS/]
413250 [Core:General]-chrome directory traversal (local disk access via “flat” addons) [All]
414856 [Core:XML]-Firefox 2.0.0.12 RC1 breaks Stylish with “TypeError: stylesheet has no properties” [Win]
415191 [Core:General]-Check in rdf/chrome version of bug 413250 [All]
415292 [Firefox:Help Documentation]-some Help content broken in fr locale [Mac]
Layout
314776 [Core:Layout]-[FIX]Content is rendered twice when using JS methods appendChild, insertBefore, replaceChild [All]
364801 [Core:Layout]-Destroy frames removed from the scrollframe. [All]
384937 [Core:Layout]-crashes [@ nsFrameManager::Destroy] upon loading page with iframe [All]
394337 [Core:Layout]-Make all stylesheet changes do an async style reresolve, not a sync one. [All]
396613 [Core:Layout]-Make all stylesheet changes do an async style reresolve, not a sync one. [All]
409849 [Core:Layout: Canvas]-1.8 branch build for ppc with gcc 4.0 fails: …/nsCanvasRenderingContext2D.cpp: 1026: error: invalid conversion from ‘int’ to ‘CGImageAlphaInfo’ [Mac]
Networking
377808 [Core:Networking]-0×7d (”}”) should be disallowed in hostnames [All]
403052 [Core:Networking]-Relicence moz*TXTToHTMLConv files [All]
404051 [Core:Networking]-Add .es to IDN TLD whitelist [All]
406314 [Core:Networking]-Add .ir to the IDN whitelist [All]
Build Config
355067 [Core:Build Config]-Package OS/2 cairo support library (mzfntcfg.dll) with SVG builds [OS/]
403250 [Core:Build Config]-[10.5] 1.8 build configured with –enable-strip fails: strip: symbols referenced by relocation entries that can’t be stripped in: …/xpinstall/src/libxpinstall.dylib [Mac]
403258 [Core:Build Config]-[10.5] When using an SDK, many configure checks fail [Mac]
408755 [Core:Build Config]-Update MOZILLA_1_8_BRANCH to NSPR_4_6_8_RTM for Leopard build compatibility [All]
408935 [Core:Build Config]-Can’t –disable-xpcom-obsolete in a 1.8 branch static build [All]
409027 [Core:Build Config]-transformiix builds with conflicting visibility on 1.8 branch due to header name collision [All]
