Mozilla scrambles to patch Firefox for second time this week
Regression bug in 2.0.0.10 breaks some sites, extensions; update may show on Friday
Computerworld - Mozilla Corp. will probably release a Firefox update tomorrow to patch a bug in the just-released 2.0.0.10 version, according to the company's bug database.
If so, it would mark the first time that Mozilla has released two versions of the open-source browser in the same week.
A bug in rendering "canvas" HTML elements worked its way into Firefox 2.0.0.10, the edition Mozilla released Monday to fix six other vulnerabilities. Canvas elements, which were first used by Apple Inc. in its Safari browser, let Web site designers dynamically render bitmap images in HTML. Firefox, Safari and Opera support Canvas natively; Microsoft Corp.'s Internet Explorer does so with a plug-in.
All editions of Firefox 2.0.0.10 -- for Windows, Mac OS X and Linux -- break pages that include the Canvas element, and cripple at least two Firefox extensions, FoxSaver and Fotofox.
Developer Kevin Han reported the regression bug late Monday, within hours of 2.0.0.10's release. By Tuesday morning, confirmations began pouring into Bugzilla, Mozilla's bug and patch database.
"I can confirm this problem," said Klaus Reimer in a message posted to Bugzilla. "Customers are complaining because their Firefox automatically updated to 2.0.0.10 and now they can no longer order photo prints in our shop. I think this is a very serious problem, and I hope it will be fixed immediately in a 2.0.0.11 update."
By midday Tuesday, developers had come up with a fix for the flaw. A day later, Nick Thomas, one of the developers working on the bug, answered questions about an update schedule. "The release of 2.0.0.11 is tentatively scheduled for Friday, Nov. 30," he said on Bugzilla. "If that comes off, it'll be the fastest turnaround between Firefox releases to date; i.e., it relies on everything in the release process going without a hitch."
In an e-mailed statement, Mike Schroepfer, vice president of engineering for Mozilla Corp., downplayed the extent of the problem. "The bug affects a specific use case of the Canvas tag, which is not yet in wide use," he said.
As for how the flaw slipped through Mozilla's testing process, Schroepfer said: "We used our standard process of releasing a beta to tens of thousands of users and had no reports of this issue prior to the full release of 2.0.0.10. Most importantly, once we became aware of the issue, we worked overtime to address it."
He did not say whether Mozilla would, in fact, deliver Firefox 2.0.0.11 on Friday.
But even if Mozilla meets the rush deadline, the snafu will leave some users very unhappy. "We develop process management Web applications on Oracle that use AJAX [and] Ruby on Rails, and we have gone out of our way to tell our customers that we 'strongly' recommend they use Firefox," said someone identified only as Jonathan on Bugzilla. "This little episode really has egg on our face.
"For a couple of days, we have had an unbearable number of support calls. I would hope this reinforces the need for someone to put in some serious effort on developing a solid and extensive suite of regression tests. This should have NEVER gotten into a public release."
Firefox 3.0 Beta 1, which launched last week, is not affected by the Canvas regression.
Read more about App Development in Computerworld's App Development Topic Center.



- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- The Keys to Distributed & Agile Application Development
- How leading firms are winning with strategies for efficient application development, without relying on co-location.
- Overcome Top 7 Admin Challenges of Active Directory
- As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable,...
- Insiders Can Ruin Your Company. Take Action.
- Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in...
- Top Solutions and Tools to Prevent Devastating Malware
- Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring...
- Streamline Compliance and Increase ROI
- Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will... All App Development White Papers
- Reduced TCO for Communications Applications with New Oracle SPARC Servers
- In this webcast learn how Oracle's new SPARC T4 servers and SPARC Supercluster deliver the security, performance, and scalability required for 4G network...
- Optimizing Networks for the Cloud
- Join guest speaker, Rohit Mehra, IDC Director of Enterprise Communications Infrastructure, to explore current trends, discuss best practices for optimizing Data Center and...
- Apps QuickStart Series Part 2: Designing and Deploying SQL Server on VMware vSphere
- Download this webcast to learn about the design considerations for virtualizing SQL workloads, performance and scalability information and high-availability options, as well as...
- Apps QuickStart Series Part 1: Designing and Deploying Exchange 2010 on VMware vSphere
- Download this webcast to learn the virtual hardware design considerations for Exchange 2010, deployment using the building block approach, options for high-availability and...
- Customer Spotlight: How IPC The Hospitalist Company Implemented Oracle on VMware
- Have you been looking to hear about customer's experiences with the new VMware vCenter Site Recovery Manager product? View this webcast to learn... All App Development Webcasts