Mozilla fixes Firefox crash bug

Computerworld - Just a week after it last updated Firefox, Mozilla has rushed out a new version of its browser to fix a crash bug that programmers inadvertently introduced.

Firefox 3.5.5, which Mozilla posted for download late Thursday, fixes a small number of what the company called "stability issues" in the release notes that accompanied the update. Unlike almost all interim updates that Mozilla issues about once every six weeks, version 3.5.5 did not patch any security vulnerabilities.

The main bug quashed Thursday was one that was causing a high number of crashes in the Windows version of Firefox 3.5.4, the update that Mozilla launched Oct. 27 to patch 16 flaws.

"We're seeing lots of crashes in the GIF decoder," noted Mozilla developer Joe Drew in the message that kicked off the discussion on Bugzilla, the company's bug and change tracking system. Only the Windows edition of Firefox 3.5.4 was crashing, others reported on Bugzilla. The GIF decoder is the component that parses .gif image files embedded in Web pages.

"This bug was actually caused by bug 514776 which removed the check for null mImageFrame," said another Firefox programmer, Jeff Mulzelaar, on Bugzilla. "I don't know why that check was removed." Information about the bug Mulzelaar mentioned is password-protected and not available to the general public.

Firefox 3.5.5 also fixes a stability bug in the Mac version, and another crash problem in the Windows and Mac editions.

Mozilla's older browser, Firefox 3.0, was not affected by the bugs. The most up-to-date version of that edition is Firefox 3.0.15, which was also released Oct. 27.

Firefox accounts for an estimated 24% of all browsers worldwide, according to data from U.S. Web metrics company Net Applications.

Firefox 3.5.5 can be downloaded for Windows, Mac OS X and Linux from the Mozilla site; current Firefox users can call up the browser's update tool or wait for automatic update notifications to appear.

Read more about security in Computerworld's Security Knowledge Center.