my name || MAIN || another shot at 1.0.3

April 05, 2005

1.0.3 final candidates

We took a couple of small fixes for minor regressions caused by the previous 1.0.2 security release and have one final round of builds. If you all could help us test these, that would be great. The bugs we fixed in this candidate are 287459 and 288006. These two changes should be near-zero risk, but if you all could look over the bugs, test around those areas, and report back here if you find any problems, that would be great.

If all goes well, these candidate builds will become the final 1.0.3 release.

windows
mac
linux


update: OK, we're not final yet. We've got at least a couple more items to address.

Posted by asa at April 5, 2005 08:39 AM
Comments

secunia just reported another javascrip problem in FX 1.0.2, will 1.0.3 fixes this problem?

Posted by: wfeng on April 5, 2005 08:52 AM

2wfeng

You're wrong. Secunia hasn't discovered any "another" bug with JavaScript, all the same and fixed.

Posted by: gass512 on April 5, 2005 09:10 AM

There's a typo in the first link which makes it unclickable.

Posted by: jens.b on April 5, 2005 09:12 AM

If it's http://secunia.com/advisories/14820/ that you mean, then that is bug 288688 and it has been fixed for 1.0.3 (and for Mozilla 1.7.7).

Posted by: Neil T. on April 5, 2005 09:15 AM

Shouldn't the link to the release notes be updated ? bug 287477

Posted by: jhermans on April 5, 2005 09:22 AM

First link reads:

287459

should be:
287459

Posted by: percy on April 5, 2005 09:22 AM

to Neil T,
yes, thats what i referred to, thanks for the information

Posted by: wfeng on April 5, 2005 09:25 AM

Will there be a Thunderbird 1.0.3 release as well?

Posted by: Jack on April 5, 2005 09:26 AM

Successfully installed without first unstalling or deleting 1.0.2. Excellent. No problem, but then, I am not using any extensions or themes.

I can anticipate one problem. Fortunately, it's easy to fix. I spend a lot of time on the user support forums, and I think it's urgent to post installation and upgrade instructions prominently, as a clear and unambiguous guide on exactly what actions to take and what not to take. The guide should specifically mention that users' profiles, with all their settings and bookmarks, will not be removed during installation. It should also mention what will happen to extensions, and what action to take, if any.

The instructions should be labeled "Installation Instructions" and be located prominently near the download button, so even an idiot could not miss seeing them. (The average user does not know what release notes are. Of those who do look at the release notes and find the installation instructions, few read down to the "Other Issues" and find all the necessary information.)

Posted by: AnotherGuest on April 5, 2005 09:30 AM

Upgrade went swimmingly; Fx 1.0.2 closed, ran exe, plugins stayed, 1.0 and 1.0.2 removed in Add Programs on W2K.

Posted by: Spewey on April 5, 2005 10:10 AM

Just installed this version and everything is ok, all extensions included.

Thanks alot.

Posted by: wazoo on April 5, 2005 10:10 AM

Upgraded from v1.0.2 ... works fine for me.

Posted by: Darken on April 5, 2005 10:13 AM

Just installed it over the second release candidate. I am using WinXP and I don't see any issues. It removed the other entry in the Add/Remove programs and my profile is intact. No crashes (yet :))

Excellent release. Thanks.

Posted by: wolovids on April 5, 2005 10:19 AM

There always is the problem when migrate preferences from IE to Firefox : Bug 266413 "Automatic Proxy Configuration URL" string is imported from IE, but radio button is still on "Direct Connection".

For new bies inside a LAN, it's really a problem.

Posted by: Etienne Juliot on April 5, 2005 10:23 AM

Success with bug 288006. No crash with this release, although the previous one from 4/4/2005 15:39pm (time stamp on my computer) crashed when dragging image to another tab.

Cannot now drag an image directly, but I can successfully drag its URL to another tab or window. Repeated attempts, no crashes.

Installation went well too. I even installed it while Fx was running. It shut down Fx and installed the new one. No problems that I know of.

-------------------------
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.7) Gecko/20050404 Firefox/1.0.3

firefox- 1.0.3.en-US.win32.installer.exe, dated 4/4/2005 18:40

Posted by: AnotherGuest. on April 5, 2005 10:35 AM

Folks, sorry to post three times, but
He is asking for people to test the bugs, not for general comments. I know, I didn't read the instructions very well either.

Posted by: AnotherGuest. on April 5, 2005 10:38 AM

AnotherGuest,

Great feedback. I really appreciate the bug verification. The more people on different platforms testing these bugs, the better. As for general or specific feedback, I'm cool with both. Any feedback is good feedback :-)

- A

Posted by: Asa Dotzler on April 5, 2005 10:42 AM

Tested both, and found that i am able to drag links to new window, not images, but it worked only once- i dragged the folder icon on some page to the new window, it showed the image.

-murali

Posted by: murali ravipudi on April 5, 2005 10:53 AM

Installed it over 1.0. Everything fine. No readable characters (other than a row of "X" created by the script itself) when running the Securia test. Prior to this update I could see recent pages visited amongst other things.

Also ran various other web browser checks and everything seems ok.

Posted by: Alan on April 5, 2005 10:57 AM

Just installed on 2 win2k machines - one over 1.0.1 and one over 1.0.2, and tried fiddling around in the areas of the bug fixes. All looks fine to me.

Hope these do prove to be the final builds, because I'm about to finish installing them on our work computers. ;)

Posted by: michaell on April 5, 2005 11:12 AM

Just tried to download a copy and I'm getting "Object not found" error pages for all of those links.

Posted by: Chris G. on April 5, 2005 11:12 AM

I installed Firefox 1.0.3 while 1.0.2 was running. After installation was complete firefox couldn't start. But a reboot of my machine (win xp sp2) solved the problem.

Bug 287459 seems to be solved!

Bug 288006 seems to be "half solved"! When i drag a gif image as shown in the bug description nothing happened. But when dragging a jpg image into the new window it is shown correctly!

Java script bug only displays "xxxxx" so it seems to be fixed.

Posted by: OmaBuck on April 5, 2005 11:42 AM

Is there any way we can get Bug 286825 - Firefox.exe is compiled with incorrect Product Version information (https://bugzilla.mozilla.org/show_bug.cgi?id=286825) addressed in this release. Seems like it should be very easy and should not need any testing since it is just an attribute at compile time.

Posted by: MorPob on April 5, 2005 12:37 PM

"firefox --version" (under Linux) still yields "Copyright (c) 2004 mozilla.org"

Posted by: anon on April 5, 2005 01:03 PM

Firefox 1.0.3 is already in the news.
I read some info about security fixes on an austrian news site (Standard.at).
I wondered that this release wasn't official jet, but the site already called for update.

Posted by: Martin Reise on April 5, 2005 01:16 PM

I installed 1.03 with 1.02 still running. It asked me to shut down firefox by clicking OK, which I did. However, the installer did not give enough time for firefox.exe to leave memory, so it asked me again. Again, I clicked OK and install went as normal. 1.03 was installed successfully, and 1.02 was removed from Add/Remove list.

Should there be a delay built in so that firefox.exe can completely close?

Posted by: Integ on April 5, 2005 01:17 PM

I don't think we necessarily ought to spread the word that you can update while running. I just wanted to see how far I could abuse it.

Posted by: AnotherGuest. on April 5, 2005 02:05 PM

yet another feedback...

- Bug 287459 is fixed.
- "Secunia's" bug is fixed too.
- Bug 288006 is not yet fixed: firefox doesn't crash, but dragging an image only works with a PNG or JPG image, not with a GIF one.


Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.7) Gecko/20050404 Firefox/1.0.3

Posted by: Ced on April 5, 2005 02:41 PM

Dont you think that you are a little to fast with the FF patches? wouldnt it be better if you skipped 1.0.2 and went directly to 1.0.3?

I dont want FF to be known as a browser where you have to update weekly.
(and yes i fully understand that security holes has to be fixed)

Posted by: mat on April 5, 2005 03:16 PM

FF 1.0.3 installs perfectly over 1.0.2...
IMHO, it's A LOT better to have one fix every day than no fix at all.

Great job, Asa and all FF guys!

Posted by: Fabfire on April 5, 2005 03:44 PM

Matt, the security issues we're fixing in 1.0.3 weren't known when we were working on 1.0.2. Had they been known, they would have been included in 1.0.2. There may be security issues that become known after we ship 1.0.3 which would necessitate a 1.0.4.

Are you suggesting that we should not ship a release with fixes for known problems because there may be new problems discovered later? If we did that, we'd never ship security updates.

- A

Posted by: Asa Dotzler on April 5, 2005 05:14 PM

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.7) Gecko/20050404 Firefox/1.0.3

No offense but the patch for Bug 288006 looks more like a last minute work around than like an actual resolution. I was expecting the same behavior as when one drags an image from IE to FF (ie the image loads in the new FF window) but instead it threw a "drop denied" error in JS console. No über big deal though =)


that's curious, I have a bookmark opened in the sidebar, and I'm trying to use the context menu to copy a link location and paste it here but it won't work (Sorry if this is an old bug I dont have the time to search bugzilla atm).

Posted by: Ol on April 5, 2005 06:52 PM

OI, it looks like a last minute work around because it is.

- A

Posted by: Asa Dotzler on April 5, 2005 07:57 PM

But it's no longer critical since it doesn't crash anymore, good news =)
Firefox is getting better everyday thanks again for all the hard work!

Posted by: Ol on April 5, 2005 08:25 PM

Okay I installed 1.0.3 and this is what I found:

1. Pros -- It removed the listing for 1.0.1 and 1.0.2 i still had in add/remove programs

2. Minor bug -- it didnt replace my desktop shortcut, and created THREE more so i have 4 desktop shortcuts , lol.

Posted by: Kupotek on April 6, 2005 07:24 AM

Oh one more thing -- it looks like none of my extensions broke which is terrific!

Posted by: Kupotek on April 6, 2005 07:25 AM

Okay, concerning the extra shortcuts, trying to delete them proves impossible and rrturns a windows error: Cannot delete file: Cannot read from the source file or disk.

Looking in the properties of these 3 anomolous shortcuts shows "This is not a valid shortcut.

Posted by: Kupotek on April 6, 2005 07:41 AM

Update: ( edit function would be great ), anyways hitting refresh on the desktop gets rid of the ghost shortcuts, but i still end up with two shortcuts as it didnt overwrite the original shortcut from 1.0.2

Very minor overall.

Posted by: Kupotek on April 6, 2005 07:43 AM

I like Firefox a lot. OMG!!! It is the browser like my Pepsi to your Coke! Please do not kill off Firefox like the news article said. Thank you.

Posted by: Tracy Milburn on April 6, 2005 08:46 AM

News article?

Posted by: Kupotek on April 6, 2005 12:17 PM

There's a zip build and thanks a million for including it. It makes alot of people's lives a whole lot easier.

Having to upgrade 50+ systems with the installer just simply wasn't going to work so I really appreciate including the zip file.

Posted by: Frank on April 6, 2005 12:51 PM

Frank, DO NOT UPGRADE 50+ SYSTEMS WITH THIS TESTING BUILD.

PLEASE.

- A

Posted by: Asa Dotzler on April 6, 2005 02:24 PM


Firefox 1.0.3 when I right click on the page anywhere it crashes.

Posted by: Organic on April 8, 2005 02:30 PM

>>DO NOT UPGRADE 50+ SYSTEMS WITH THIS TESTING BUILD

Oh no no no. Sorry Asa, I didnt mean to scare you like that. Theres no way in hell that i'd implement a preview build made for testing on a network with compartmentalized sensitive information. I use a really strong security schema and individual policy on my network and I'd never compromise myself like that.

Ive only got it on my testing machine and my home system and thats it, and I used the .zip build for both of course. I was just saying that its nice to see the nightly .zip file corresponding to the same build for the installer because I couldnt easily upgrade alot of the machines on my network to Fx 1.0.2, I couldnt ever find the corresponding nightly's .zip so I only installed it on a few systems of the employees that I know much prefer Firefox.

I must say though, after using both builds that ive tested(this one and the newest one as of 9 April), I think 1.0.3 is great so far. I didnt have any problem with broken extentions at all with either build. I hope to see the final release soon.

And also on an aside kudos on that popup blocker extention. I really like the new version of it, I started using it at home instead of the one Symantec has with their firewall software and I really like it a whole lot better. Not as clunky and quite a bit more flexible.

Posted by: Frank on April 9, 2005 09:14 AM

I just noticed on mine (1.0.3) that the ext. "Xmirror" doesn't seem to work,
maybe it's just my system (XP home), the mirrors show , but clicking on them crashes FF

Posted by: mike555 on April 9, 2005 11:24 AM

New here,

First and foremost, thanks for all the crew for putting together firefox - a blessing indeed.

That problem with multiple firefox desktop icons and the inability to remove them has plagued many of my friends - and the vast majority of myu friends with multiple versions of firefox in the add/remove - I'm sure you'll get it fixed alright for 1.0.3 - but I'm just letting you know it's not inherently "minor". I guess it's just very annoying according to alot of feedback (including my school who migrated many PC's to firefox).

Is their any plans ahead to have a true extension remover? I have a hand full of extensions i want to get rid of but i just can't seem to do it. I delete all registry values (as told on mozilla.com in instructions) , I re-install firefox etc - no go. I also can't even use them, or even use extensions to remove extentions. I'm sure formating would fix it...blah.

Keep up good work!

J.A.

Posted by: slambammin on April 11, 2005 01:04 PM

Post a comment