** Attachment added: "GDB backtrace (Firefox 27.0)" https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1279001/+attachment/3977455/+files/gdb_backtrace.txt
** Description changed: Ubuntu: 12.04.4 Firefox: 27.0+build1-0ubuntu0.12.04.1 (also confirmed with 26.0, 28.0a2 and 29.0a2) Firefox consistently crashes when opening a page that contains a HTML5 audio element with an M4A source, or attempting to play an M4A stream (e.g. podcast) via an audio player widget that creates such an element on the fly. To reproduce, open the attached test case HTML or go here and click the "Play" button: http://johnaugust.com/podcast - Mozillazine discussion: + mozillaZine discussion: http://forums.mozillazine.org/viewtopic.php?f=9&t=2799251 Note: while this is fixed in the latest Firefox Nightly (30.a01), I can't find a bug report on Bugzilla specifically referencing this issue, locate the commit that implemented the fix, or find any indication that the fix will be backported. In the meantime, it presents a rather trivial way to accidentally or maliciously crash Firefox. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1279001 Title: Firefox crashes when opening a page containing an audio element with an M4A file Status in “firefox” package in Ubuntu: New Bug description: Ubuntu: 12.04.4 Firefox: 27.0+build1-0ubuntu0.12.04.1 (also confirmed with 26.0, 28.0a2 and 29.0a2) Firefox consistently crashes when opening a page that contains a HTML5 audio element with an M4A source, or attempting to play an M4A stream (e.g. podcast) via an audio player widget that creates such an element on the fly. To reproduce, open the attached test case HTML or go here and click the "Play" button: http://johnaugust.com/podcast mozillaZine discussion: http://forums.mozillazine.org/viewtopic.php?f=9&t=2799251 Note: while this is fixed in the latest Firefox Nightly (30.a01), I can't find a bug report on Bugzilla specifically referencing this issue, locate the commit that implemented the fix, or find any indication that the fix will be backported. In the meantime, it presents a rather trivial way to accidentally or maliciously crash Firefox. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1279001/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp