[%- mypath = "${template.name}"|replace('[^\/]*$','') -%] [%- PROCESS "${mypath}/relnote.var" -%]

# Rough Changelog for [% rnote.name %]

This is a list of bugs pulled from Bugzilla. It's a "rough" list because I didn't verify each bug on the list as actually having been fixed in the [% rnote.version %] development cycle and I may have missed some that were; I just used the smartest Bugzilla queries I could devise. It's not perfect but if you're interested in what got fixed since [% rnote.relativeto.name %] this is probably the best place to start. -Robert

    89419 Caching of images loaded from a 302 is broken
    141606 tags applied (IMAP) when offline not available after going online
    316859 undefined symbol in components/libhtmlpars.so
    352604 "Assertion failure: !OBJ_GET_PROTO(cx, ctor)" after deleting Function
    353011 bookmark tooltips appear behind bookmarks menu
    355126 stealing pictures via canvas and http redirect
    355567 Firefox stores corrupted version of cached JavaScript file (merges two files together)
    376777 data for "text/uri-list" flavor set in nsIClipboardDragDropHooks::OnCopyOrDrag() is overridden in nsDragService::SourceDataGet()
    390219 Trunk topcrash [@ nsXMLHttpRequest::OnStartRequest]
    407733 [1.8 branch] js-1.7.0.tar.gz does not build on WIN32
    416284 Detached attachments should not be able to be re-detached
    424733 [FIX]CSS -moz-binding property bypasses security checks on codebase principals
    436741 "Assertion failure: OBJ_IS_NATIVE(obj)" with __proto__ mangling
    443299 Investigate possible buffer overflow in nsDirIndexParser
    450359 nsFileSpec::Truncate() expects PRInt32 as the first argument so mail may disappear.
    450864 c++ style comment in parser/expat/lib/moz_extensions.c
    450909 missing support for AIX target in configure.in
    450991 Number in "Order Received" column becomes negative, when mail's offset in local mail folder file exceeds 2GB
    451139 The return value of read() function should check in nsRandomAccessInputStream::readline instead of invoking failed().
    451506 The return values of PR_Seek64 and PR_Available64 should be checked in  FileImpl::Seek or else file corruption will occur
    452295 segfault: echo 'eval("1")' | ./js
    453254 nsZipReaderCache::GetZip doesn't null-check the zipFile argument
    453915 XML injection possible in E4X parsing via "default xml namespace"
    454113 e4x/extensions/regress-374025.js - invalid write
    455311 [FIX]mid-autumn festival vulnerability
    455987 integer overflow in nsEscape
    456896 [FIX]Crash [@ nsFrameManager::GetPrimaryFrameFor] with invalid input type (zdi-can-390)
    457093 toString on js function w/ try catch silently hangs js execution
    457411 [1.8 branch] Crash while uploading files to MediaFire.com [@ nsXMLHttpRequest::ConvertBodyToText]
    457788 eval(string) crashes in js_ComputeFilename
    458883 Make Document.documentURI and .textContent noAccess in mailnews
    460002 It's possible to circumvent the inner window check in nsXMLHttpRequest::NotifyEventListeners()
    462344 Update SeaMonkey version number on GECKO181_20081030_RELBRANCH