Mac bug forces Mozilla to Firefox 3.0 RC3

Computerworld - A change that Apple Inc. made in its latest update to Mac OS X forced Mozilla Corp. to issue a third release candidate for Firefox 3.0, according to notes from a status meeting the company held yesterday.

As of 3 p.m. EDT Wednesday, Mozilla had seeded its download site with Release Candidate 3 (RC3).

The bug, which affected only the Macintosh version of the open-source browser, caused some systems to hang or crash at start-up or shutdown. According to Bugzilla, Mozilla's bug-tracking and management system, the problem was traced to a change Apple made to "VerifiedDownloadPlugin" in Mac OS X 10.5.3.

Apple released 10.5.3 two weeks ago to fix more than 100 stability and security bugs.

Mozilla developers reported the problem to Apple. According to someone identified only as "Philippe," who submitted the bug to Apple, the company's engineers e-mailed him to say, "After further investigation, it has been determined that this is a known issue, which is currently being investigated by engineering."

However, Mozilla executives were unwilling to wait for a fix from Apple. "Anything we do in our application will be a work-around; any real fix has to come from Apple, on their timeline," Mike Shaver, Mozilla's chief evangelist, noted in a message yesterday on the Bugzilla thread discussing the patch. Rather than wait -- for potentially a long time, since others on Bugzilla confirmed that an unreleased 10.5.4 update to Mac OS X also contained the flaw -- Shaver created a work-around that prevented the at-fault plug-in from loading. Shaver's work-around was added to the Firefox code yesterday.

No changes were made to the Windows and Linux versions of Firefox 3.0; instead, what had been set as last week's RC2 was simply renamed RC3.

Mozilla was even unsure about the purpose of the Apple plug-in. "I'm worried that the plug-in is part of Apple's download security scheme," said Ben Turner on Bugzilla a week ago. "Maybe it's this plug-in that is responsible for marking downloaded executables as coming from the Internet." But others, including Shaver, thought it safe to disregard VerifiedDownloadPlugin because Apple's own Safari Web browser doesn't bother to load it.

The need to do another release candidate won't delay the roll-out of Firefox 3.0, said Mike Beltzner, Mozilla's product lead. "Thanks to the very, very minimal nature of the patch, and that it was in OS X-only code, we don't expect any impact to the release date," he said in an e-mail later Wednesday. Previously, Mozilla had set a mid-month deadline for shipping a final version.

Firefox 3.0 RC3 can be downloaded for Windows, Mac OS X and Linux in 43 languages from Mozilla's site.