Firefox 2.0.0.1 is now released! (2006-12-19)
Release Notes | Fixed Security Issues | Download Webpage | FTP

Bugs fixed for Firefox 2.0.0.1: ~183 in total; 42 crashers, 3 memory leaks, 41 regressions and 4 privacy-related bugs.

General Landings

1. #70798 [Core:XP Toolkit/Widgets: XUL]-Ability to have transparent background on popups [All]
2. #220900 [Core:Editor]-Focus breaks, cut/copy/paste and other focus-dependent tasks broken [All] (Might also fix #311376 [Firefox:Find Toolbar / FastFind]-Occasionally ' or / keys start find bar even in textareas [slash, apostrophe, quote, FAYT] [All])
3. #286179 [Firefox:Build Config]-make parallel builds possible on Windows using MSVC [Win]
4. #292833 [Core:XBL]-crash if i press any function key after i removed a parent of an xbl binding, where the binding has a keyset. [All]
5. #295306 [Core:XPCOM]-Firefox is unusable in solaris x86 using Sun SOS10 compiler. [Sol]
6. #307400 [Firefox:Startup and Profile System]-Scrolling profiles in Profile Manager broken on other than English build when there are 6 profiles [All]
7. #308778 [Core:Plug-ins]-setting fantasy football sportsline.com MimeTypeArrayImpl::GetMimeTypes [Win]
8. #312363 [Core:Security: UI]-document.write into iframe results in broken-lock icon (bankhapoalim.co.il incorrectly indicated as only partially encrypted) [Win]
9. #317948 [Core:Layout: Misc Code]-[FIX]Possible to readd frames to frame map after they've been removed [Lin]
10. #321994 [Core:MathML]-Firefox doesn't display pages containing MathML [All]
11. #322345 [Cairo]-Cap maximum ft2 font size at 1000 pixels to avoid killing freetype2 and/or the X server. [All]
12. #322625 [Core:Frame Construction]-Slightly improve handling of positioned kids of MathML [All]
13. #323737 [Core:MathML]-Hang involving <mtable> and <mroot> [All]
14. #323741 [Core:MathML]-"ASSERTION: index out of range" with this MathML testcase [Mac]
15. #323783 [Core:Printing]-Print to Ledger/Tabloid (11"x17") paper [Lin]
16. #328346 [Core:Security: PSM]-Certificates with keyusage nonRepudiation should not be used as SSL client certificates [Win]
17. #328988 [Core:Spelling checker]-kill builtinURLs.rdf [All]
18. #329399 [Core:HTML: Parser]-Crash with iExploder test 10050419 js_AllocStack [All]
19. #330367 [Core:Keyboard: Navigation]-Firefox 1.5/2.0 crashes for onblur focusing an "overflow" div that also gets "diplay:none" set at the same time while checking other data PresShell::ScrollFrameIntoView [All]
20. #330456 [Core:XP Toolkit/Widgets: Menus]-evil XUL with <menubar> within <toolbarbutton> makes browser crash nsMenuFrame::DoLayout [All]
21. #335047 [Core:Parser]-Fix topcrash nsExpatDriver::ParseBuffer [All]
22. #335162 [Firefox:Bookmarks]-right click contextual popup in bookmarks menu ignores key aht ccelerators [Win]
23. #337179 [Core:Web Services]-Schema with forward type definitions causing load errors [All]
24. #337889 [Core:Style System (CSS)]-crash nsCSSDocumentRule::URL::URL [Win]
25. #339494 [Core:Xul]-(undisclosed fix) [All]
26. #340969 [Toolkit:Satchel]-crash at nsFormFillController::GetTextValue [Win]
27. #344812 [Core:Security: UI]-string ID typo in CertViewer: fix display of KU_CRL_SIGN key usage bit [All]
28. #346927 [Canvas]-Don't trust lying widget image implementations [All]
29. #347513 [Core:Widget: Win32]-When switching windows, current window stays in front of display (even when it loses focus, as expected) [Win]
30. #347875 [Core:Widget: Win32]-Support WM_MOUSEHWHEEL for tilt wheel mouse [Win]
31. #348031 [Firefox:Tabbed Browser]-[Mac] Pressing Cmd-W should always close the window when only one tab is visible [Mac]
32. #348304 [Core:Xul]-(undisclosed fix) [All]
33. #348706 [Core:Java to XPCOM Bridge]-Passing null as a value of a DOM attribute causes crash [All]
34. #349319 [Core:Spelling checker]-If you have both the en-GB and the en-GB-oed dictionaries installed you can't distinguish them when trying to select the correct dictionary [All]
35. #350455 [Core:Printing]-Japanese printing page shown garbage character. [Lin]
36. #350785 [Toolkit:Satchel]-Autocomplete / Form Manager stores element data even if Autocomplete is "off" [All]
37. #351310 [Core:Keyboard: Navigation]-Use unshifted charCode/keyCode for accesskey handling [All]
38. #351491 [Core:Keyboard: Navigation]-first click in a window does not follow a link with caret browsing on [All]
39. #351744 [Other Applications:DOM Inspector]-Memory leak in |inFileSearch::SetFilenameCriteria| (inFileSearch.cpp) [All]
40. #352260 [Core:XBL]-XBL binding failing to get document in getBoxObject [Lin]
41. #352848 [Core:Networking: Cache]-cache expiration problems with blog sites? (14 years of Heurostic Expiration instead of considering as "expired", if "Expires: -1" is returned) [Win]
42. #353141 [Firefox:Preferences]-In Options/Preferences window, Globe (Content) icon image has top and right cutoff. [All]
43. #353553 [Core:Widget]-Fix regression from bug 286622 [All]
44. #353918 [Firefox:Extension/Theme Manager]-No updates available notification does not go away when switching the view [All]
45. #354133 [Core:Frame Construction]-Make the block part of an {ib} split have a space manager if it needs to [All]
46. #354711 [Core:XPCOM]-Crash when accessing images.length [All]
47. #354766 [Core:Frame COnstruction]-<mathml> with border-collapse <html> crashes [All]
48. #355046 [Core:Event Handling]-Crash nsCOMPtr_base::~nsCOMPtr_base when dragging splitter which gets removed during that time [Win]
49. #355059 [Core:GFX: Gtk]-valgrind free memory read warning from multiple FT_Done_Face calls in nsFontMetricsPS.cpp [Lin]
50. #355151 [Core:XML]-XML-RPC fails with "XMLHttpRequest is not defined" due to assuming namespace pollution [All]
51. #355179 [Core:Widget]-Vista - Sets the current process as dpi aware [Win]
52. #355195 [Firefox:General]-"temporary testing assertions" that were supposed to be disabled before the release haven't been disabled [All]
53. #355291 [Firefox:History]-Recently Closed Tabs > Open All In Tabs throws exceptions when Always Display Tab Bar is enabled. [All]
54. #355395 [Core:Printing]-Misspelled words in text areas cause all following text to disappear during print. [All]
55. #355399 [Firefox:Phishing Protection]-unclean shutdown while safe browsing initializes (makes zombies) [All]
56. #355447 [Core:Security: PSM]-Certificate Viewer shows no details for certs in chain [All]
57. #355931 [Core:Event Handling]-[FIX]crash when upload a file in Google Page Creator 0x00000000 nsEventListenerManager::HandleEvent [All]
58. #355993 [Core:MathML]-[FIX]Crash nsIFrame::GetPositionIgnoringScrolling with MathML table, position: fixed [All]
59. #356017 [Firefox:Microsummaries]-Clicking twice 'OK' needed for creating a bookmark with microsummary [All]
60. #356287 [Core:XPCOM]-Download fails if TMP environment variable is set using forward slashes [OS/]
61. #356355 [Firefox:Phishing Protection]-numeric domain normalization only happens on enchash table values [All]
62. #356463 [Firefox:Bookmarks]-add X-Moz: livebookmark to http request when doing live bookmark refreshes [All]
63. #356618 [Toolkit:Storage]-Storage tests fail to link to xpcom ( move to TOOL_DIRS ) [Lin]
64. #356694 [Core:Plug-ins]-Flash doesn't work on Intel Macs, problems with "Flash Player Enabler.plugin" (which is PowerPC) [Mac]
65. #356851 [Core:XPConnect]-nsXPConnect::ReparentAllWrappersInScope uses wrong parents. [Lin]
66. #357109 [Firefox:Search]-Invalid search engine update URLs may cause an assertion dialog each time an update check occurs [All]
67. #357163 [Core:SVG]-Opacity of elements referencing a gradient isn't respected (opacity, fill-opacity and stroke-opacity) [Win]
68. #357333 [Core:Security: PSM]-Branches only: build using a supported NSS 3.11 tag [All]
69. #357426 [Core:XPCOM]-Debug nsAutoLocks cause CPU spike [Lin]
70. #357853 [Firefox:General]-if no browser window exists, "-new-tab <url>" commandline argument does not open <url> [All]
71. #357922 [Firefox:Installer]-Bookmarks missing, tabs broken, etc. (Firefox 2 install over Firefox 1.5.0.7 failed to replace some files.) [Win]
72. #358015 [Firefox:Menus]-Release notes can't be opened from source viewer/bookmarks manager [All]
73. #358128 [Core:Networking]-HTML injection in gopher dir listing ("xxs in Firefox 2.0?") [All]
74. #358285 [Toolkit:Preferences]-You can open multiple Password Manager windows at once [All]
75. #358287 [Toolkit:Preferences]-Able to open multiple ConfigManager (about:config for non-browser apps) windows [All]
76. #358558 [Core:XPCOM]-R_386_PC32 relocations in libtracemalloc.so when building on FC6 [Lin]
77. #358559 [Core:XPCOM]-R_386_PC32 relocations in libxul.so when building on FC6 [Lin]
78. #358560 [Core:GFX: OS/2]-Canvas2D renders black with 16M colors on OS/2 [OS/]
79. #358570 [Firefox:Search]-The query characters are garbled with OpenSearch without <inputEncoding> [All]
80. #358720 [Core:Disability Access APIs]-Crash nsAccessibilityService::GetAccessible [All]
81. #358741 [Core:XP Toolkit/Widgets: XUL]-Crash nsListBoxBodyFrame::GetListItemContentAt [All]
82. #358853 [Firefox:Password Manager]-crash opening html sidebar with xul frame while having "remember passwords" enabled nsPasswordManager::FillDocument [Win]
83. #358863 [Firefox:General]-High CPU load and jumping of elements if bookmarks toolbar overflows [OS/]
84. #358891 [Firefox:Search]-Firefox doesn't remember the search engine with non-ascii characters as its selected engine [All]
85. #358953 [Core:General]-visibility patches for 1.8 branch [Lin]
86. #359148 [Core:File Handling]-When saving a file, "unicode" characters in filename are lost (turned into '_') [Win]
87. #359882 [Core:Preferences: Backend]-autoconfig e-mail address detection doesn't work with multiple identities [Win]
88. #360021 [Core]-Use the right child list when removing nodes from the document. [All]
89. #360293 [Canvas]-Add helper macros for argument checking [All]
90. #360301 [Toolkit:XUL Widgets]-Fail to remove mouse handlers from tree when dragging columns [Lin]
91. #360579 [Core:Tabbed Browser]-[FIX]Fix for bug 326009 doesn't work quite right with more than 2 tabs [Lin]
92. #360585 [Firefox:Build Config]-Version/config bumps for Fx 2.0.0.1 [All]
93. #360743 [Firefox:Build Config]-Add Kurdish and Georgian to the Firefox build [All]
94. #360869 [Core:SVG]-text-anchor='middle' does not work with text content added via certain scripts [Win]
95. #360936 [Core:XML]-XML parsing regression? [Win]
96. #362297 [Core:XSLT]-The xslt-param code doesn't initialize recycler [All]
97. #362709 [Firefox:Preferences]-Typo in fonts prefs [Win]
98. #362874 [Firefox:Build Config]-Add he, ka, ku locales to shipped-locales [All]
99. #363054 [Core:Keyboard: Navigation]-Ctrl-Shift Keyboard Shortcuts broken (linux) [Lin]


DOM Landings

1. #317078 [Core:DOM: Events]-onchange event not fired for single selection single line SELECT elements first OPTION, if there was previously no selection made (selectedIndex == -1) [All]
2. #339350 [Core:DOM: Core]-js: innerHTML removes 2 last symbols "]]" [Win]
3. #353022 [Core:DOM]-leak when loading google firefox homepage, clicking bookmark, and closing window [Lin]
4. #353090 [Core:DOM]-Memory leak on google personalized home page [All]
5. #355221 [Core:DOM]-All Firefox windows closes suddenly (crash) if I load the page 0x042b682f nsGenericHTMLElement::BindToTree [All]
6. #355482 [Core:DOM]-Allow window.focus (raise/lower windows) on other windows at times when popups are allowed [All]
7. #356474 [Core:DOM]-[FIX]Scam Site (w/ Frames) not redirecting [All]
8. #357651 [Core:DOM]-codes of onmouseover lost. [Lin]
9. #358755 [Core:DOM]-crash nsDOMClassInfo::PreCreate when going back [All]
10. #358723 [Core:DOM: HTML]-Crashes nsHTMLDocument::GetCookie [All]
11. #358797 [Core:DOM: Traversal-Range]-range.createContextualFragment() crash when range node is DocType [All]


Layout Landings

1. #311143 [Core:Layout: Canvas]-Building with sun linker rather than gnu linker on solaris causes "elf" failures. [Sol]
2. #312963 [Core:Layout: Block and Inline]-crash when * {-moz-column-width:20em; -moz-column-gap:2em;} ReparentFrame [All]
3. #318592 [Core:Layout]-[FIX]Crash with evil testcase, using float:right; and .u::first-letter { letter-spacing: 50px; } nsQuoteList::Calc nsQuoteNode::DepthAfter nsCSSFrameConstructor::RemoveFirstLetterFrames [All]
4. #330909 [Core:Layout: R & A Pos]-GetAbsoluteContainingBlock() is broken [Win]
5. #348510 [Core:Layout]-[FIX]Crash with iExploder test 243244 nsHTMLReflowState::ComputePadding [Win]
6. #350267 [Core:Layout]-More CantRenderReplacedElement hackery [All]
7. #350444 [Core:Layout: Tables]-[FIX]Vertical borders in table containing col elements are not shown [All]
8. #351225 [Core:Layout]-Crash nsIView::Destroy on print preview with The New York Times [All]
9. #354144 [Core:Layout]-[FIX] position:absolute is broken [All]
10. #354451 [Core:Layout: Fonts and Text]-reprise bug 96423 : german character &szlig; - buggy capitalization (text-transform: uppercase) [All]
11. #354489 [Core:Layout]-[FIX]Crash nsBlockBandData::Init with mathml:mtable in xul [All]
12. #354510 [Core:Layout]-[FIX]Crash nsBlockBandData::Init when moving mathml:geq inside html:span with display:table with removed mathml.css rule [All]
13. #355869 [Core:Layout: Canvas]-Invalid read in nsCanvasRenderingContext2D::ContextState::ContextState [Lin]
14. #359203 [Core:Layout]-(undisclosed fix) [All]
15. #360642 [Core:Layout]-(undisclosed fix) [All]
16. #361058 [Core:Layout]-gcc2.95.3 fails to compile nsListBoxBodyFrame.cpp [BeO]


RSS Landings

1. #347897 [Firefox:RSS Discovery and Preview]-view source on feeds preview shows contents of wrong page [All]
2. #350949 [Firefox:RSS Discovery and Preview]-Feed preview leaks memory [Mac]
3. #355332 [Firefox:RSS Discovery and Preview]-Feed sniffing ignores content-disposition, displays "attachment" in the browser [All]
4. #358878 [Firefox:RSS Discovery and Preview]-Feed preview's request for favicon.ico should not send Referer [All]
5. #361230 [Firefox:RSS Discovery and Preview]-Add a way to tell the parser the feed has been sniffed [All]
6. #361531 [Firefox:RSS Discovery and Preview]-Ampersands in URL aren't escaped when inserted in generated base attribute [Win]


JavaScript Engine Landings

1. #336731 [Core:JavaScript Engine]-Do more checking when calling watch handlers. [All]
2. #347248 [Core:JavaScript Engine]-Optimizing the stack property of error objects [All]
3. #347306 [Core:JavaScript Engine]-toSource of long functions seems O(n^2). [All]
4. #350256 [Core:JavaScript Engine]-apply can't accept parameter arrays larger than 65534 [All]
5. #352064 [Core:JavaScript Engine]-Error finalizing JS objects causes LiveConnect crash [All]
6. #352455 [Core:JavaScript Engine]-JS engine stops execution trying to uneval an object w/ some non-function getters/setters [All]
7. #352742 [Core:JavaScript Engine]-Array.filter on object {valueOf: Function} halts JavaScript execution [All]
8. #352797 [Core:JavaScript Engine]-"Assertion failure: OBJ_GET_CLASS(cx, obj) == &js_BlockClass" with xml filtering predicate operator, eval.call, let [All]
9. #354978 [Core:JavaScript Engine]-Make the pseudo frame look even more like a real one. [All]
10. #354982 [Core:JavaScript Engine]-Cleaning up iterator implementation [All]
11. #355023 [Core:JavaScript Engine]-destructuring assignment (group assignment) optimized too much [All]
12. #355049 [Core:JavaScript Engine]-decompilation of for..in destructuring into two holes causes "Assertion failure: pos != 0" [All]
13. #355105 [Core:JavaScript Engine]-"Assertion failure: count > 0" with "catch([] if true)" [Mac]
14. #355161 [Core:JavaScript Engine]-Function.prototype disappears after several seconds of browser's work. (chrome) [Win]
15. #355339 [Core:JavaScript Engine]-"Assertion failure: sprop->setter != js_watch_set" setting watch after unwatch [All]
16. #355341 [Core:JavaScript Engine]-Crash with watch and setter js_PCToLineNumber Function [All]
17. #355344 [Core:JavaScript Engine]-Exceptions thrown by watchpoint show up in the next call to "eval" [All]
18. #355556 [Core:JavaScript Engine]-Crash js_Interpret with "arguments" as second param to eval [All]
19. #355635 [Core:JavaScript Engine]-"Assertion failure: top <ss>printer->script->depth" with "let" that binds nothing [All]
20. #355832 [Core:JavaScript Engine]-"Assertion failure: OBJ_GET_CLASS(cx, obj)->flags & JSCLASS_HAS_PRIVATE" or null deref js_FindProperty with "let" that binds nothing [All]
21. #355992 [Core:JavaScript Engine]-"Assertion failure: strncmp(rval, js_function_str, 8) == 0 && rval[8] == ' '" with non-function setter [All]
22. #356085 [Core:JavaScript Engine]-Incorrect uneval of object with named getter function; property and function names are mashed together [All]
23. #356238 [Core:JavaScript Engine]-(undisclosed fix) [All]
24. #356250 [Core:JavaScript Engine]-"Assertion failure: !fp->fun || !(fp->fun->flags & JSFUN_HEAVYWEIGHT) || fp->callobj" [All]
25. #356402 [Core:JavaScript Engine]-(undisclosed fix) [All]
26. #356693 [Core:JavaScript Engine]-Move pn_op forcing into the code generator. [All]
27. #357063 [Core:JavaScript Engine]-(undisclosed fix) [All]
28. #357169 [Core:JavaScript Engine]-GC temp roots cleanup [All]
29. #357388 [Core:JavaScript Engine]-js_SweepScopeProperties can leave a JSScopeProperty with dangling parent pointer [All]
30. #357392 [Core:JavaScript Engine]-jsdtoa.c - locks not released in some error cases [Win]
31. #357398 [Core:JavaScript Engine]-js_ExpandErrorArguments can crash in OOM conditions [All]
32. #357754 [Core:JavaScript Engine]-Top-level closures don't see let-bound variables [All]
33. #358183 [Core:JavaScript Engine]-XML equality does not compare all attributes [All]
34. #358192 [Core:JavaScript Engine]-Make sure that Out-of-Memory during exception initialization is properly propagated. [All]
35. #358569 [Core:JavaScript Engine]-When running with reduced FPU precision, a rounding error can cause an infinite loop and consequent crash. [All]
36. #358965 [Core:JavaScript Engine]-XMLList.prototype.contains() no longer work [All]
37. #358975 [Core:JavaScript Engine]-Silent failure on Out-of-Memory in Function constructor [All]
38. #359062 [Core:JavaScript Engine]-Accessing a generator's local variables from nested functions is broken [All]
39. #360612 [Core:JavaScript Engine]-GC can leave GSN cache pointing to destroyed script [All]
40. #360969 [Core:JavaScript Engine]-This page crashes SpiderMonkey js_LookupPropertyWithFlags [All]
41. #361273 [Core:JavaScript Engine]-Assert fail: cg->stackDepth >= 0, at jsemit.c:164 [All]
42. #361274 [Core:JavaScript Engine]-embedded nulls in Javascript object property names not allowed? [All]
43. #362180 [Core:JavaScript Engine]-Optimizing slot access in JS_NewPropertyIterator [All]
44. #361346 [Core:JavaScript Engine]-Mark our saved setter in case we have the last reference to it. [All]
45. #361360 [Core:JavaScript Engine]-"Assertion failure: !caller || caller->pc" in obj_eval involving setter and watch [All]
46. #361362 [Core:JavaScript Engine]-js/src/jsemit.c assumes sizeof(int) == sizeof(ptrdiff_t) [Net]
47. #361467 [Core:JavaScript Engine]-Crash js_watch_set with certain watcher functions [All]
48. #361571 [Core:JavaScript Engine]-"Assertion failure: fp->scopeChain == parent" with watch, setter, eval [Mac]
49. #361964 [Core:JavaScript Engine]-Make argv as large as GC expects it to be. [All]
50. #362213 [Core:JavaScript Engine]-Fix crash in MimeExternalBody_parse_eof [All]



fix bug for 2.0

http://releases.mozilla.org/pub/mozilla.or...p%202.0.0.1.exe