Crash when using dynamic import with data URL
Reported by
s.h.h.n....@gmail.com,
Oct 11 2017
|
||||
Issue descriptionUserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36 Steps to reproduce the problem: 1. Go to https://test.shhnjk.com/dynam.html What is the expected behavior? No crash. What went wrong? Don't know Crashed report ID: 57cc2be0-e35e-4188-8dc0-be636be01e1f How much crashed? Just one tab Is it a problem with a plugin? N/A Did this work before? N/A Chrome version: 63 Channel: dev OS Version: 10.0 Flash Version:
,
Oct 11 2017
Is this exploitable Read AV?
,
Oct 17 2017
kouhei@, Could you please take a look into this issue & update the thread accordingly as it is marked as stable blocker issue. Thanks..!
,
Oct 18 2017
This is fixed at https://chromium-review.googlesource.com/c/chromium/src/+/711634
,
Oct 18 2017
,
Oct 18 2017
[Auto-generated comment by a script] We noticed that this issue is targeted for M-63; it appears the fix may have landed after branch point, meaning a merge might be required. Please confirm if a merge is required here - if so add Merge-Request-63 label, otherwise remove Merge-TBD label. Thanks.
,
Oct 18 2017
Should be fine per: https://storage.googleapis.com/chromium-find-releases-static/b2f.html#b2f553ded0e6e4b194910cf33247c7e81e1f06b2 |
||||
►
Sign in to add a comment |
||||
Comment 1 by ajha@chromium.org
, Oct 11 2017Components: Blink>HTML>Script
Labels: -Type-Bug -Pri-2 hasbisect-per-revision ReleaseBlock-Stable M-63 Needs-Triage-M63 OS-Linux OS-Mac Pri-1 Type-Bug-Regression
Owner: kouhei@chromium.org
Status: Assigned (was: Unconfirmed)