File epiphany-fix-crash-CVE-2018-11396.patch of Package epiphany

Overview Repositories Revisions Requests Users Attributes Meta

File epiphany-fix-crash-CVE-2018-11396.patch of Package epiphany (Revision 298e6f00ee5f7841ab178ebdfd8b39ea)

Currently displaying revision 298e6f00ee5f7841ab178ebdfd8b39ea , Show latest

From 8c434004c0c5937c948cec6cccd95f547a0c14df Mon Sep 17 00:00:00 2001
From: Michael Catanzaro <mcatanzaro@igalia.com>
Date: Tue, 22 May 2018 21:06:32 -0500
Subject: [PATCH] session: Fix crash when JS opens an invalid URI

https://bugzilla.gnome.org/show_bug.cgi?id=795740
---
 src/ephy-session.c |  9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/src/ephy-session.c b/src/ephy-session.c
index 8a86cea..532930e 100644
--- a/src/ephy-session.c
+++ b/src/ephy-session.c
@@ -828,8 +828,15 @@ session_seems_sane (GList *windows)
       SoupURI *uri;
       gboolean sane = FALSE;
 
+      /* NULL URLs are possible when an invalid URL is opened by JS.
+       * E.g. <script>win = window.open("blah", "WIN");</script>
+       */
+      if (url == NULL)
+        continue;
+
       /* Blank URLs can occur in some situations. Just ignore these, as they
-       * are harmless and not an indicator of a corrupted session. */
+       * are harmless and not an indicator of a corrupted session.
+       */
       if (strcmp (url, "") == 0)
         continue;
 
--
libgit2 0.27.0

Places

File epiphany-fix-crash-CVE-2018-11396.patch of Package epiphany (Revision 298e6f00ee5f7841ab178ebdfd8b39ea)

Places