[Bug 1279001] [NEW] Firefox crashes when opening a page containing an audio element with an M4A file

[chocolateboy]

*** This bug is a security vulnerability ***

Public security bug reported:

Ubuntu: 12.04.4
Firefox: 27.0+build1-0ubuntu0.12.04.1 (also confirmed with 26.0, 28.0a2 and 29.0a2)

Firefox consistently crashes when opening a page that contains a HTML5
audio element with an M4A source, or attempting to play an M4A stream
(e.g. podcast) via an audio player widget that creates such an element
on the fly.

To reproduce, open the attached test case HTML or go here and click the
"Play" button: http://johnaugust.com/podcast

mozillaZine discussion:
http://forums.mozillazine.org/viewtopic.php?f=9&t=2799251

Note: while this is fixed in the latest Firefox Nightly (30.a01), I
can't find a bug report on Bugzilla specifically referencing this issue,
locate the commit that implemented the fix, or find any indication that
the fix will be backported. In the meantime, it presents a rather
trivial way to accidentally or maliciously crash Firefox.

** Affects: firefox (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: audio crash firefox m4a podcast podcasts

** Attachment added: "minimal test case"
   https://bugs.launchpad.net/bugs/1279001/+attachment/3977454/+files/m4a.html

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1279001

Title:
  Firefox crashes when opening a page containing an audio element with
  an M4A file

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1279001/+subscriptions