(In reply to comment #58) > (In reply to comment #56) > > In the former case I suspect this: > > http://mxr.mozilla.org/mozilla1.9.1/source/toolkit/mozapps/update/src/nsUpdateService.js.in#2415 > > > > What hash algorithm is used for application updates signing? Is it SHA256? > > We switched from SHA1 to SHA512 for app. update hashes when 3.5b99 was > released.
So does this mean that we can mitigate this crash by using a different SHA algorithm until we fix this bug? Most of the comments in the crash reports indicate that the crash happens on browser-close, which isn't as concerning to me.
(In reply to comment #58) mxr.mozilla. org/mozilla1. 9.1/source/ toolkit/ mozapps/ update/ src/nsUpdateSer vice.js. in#2415
> (In reply to comment #56)
> > In the former case I suspect this:
> > http://
> >
> > What hash algorithm is used for application updates signing? Is it SHA256?
>
> We switched from SHA1 to SHA512 for app. update hashes when 3.5b99 was
> released.
So does this mean that we can mitigate this crash by using a different SHA algorithm until we fix this bug? Most of the comments in the crash reports indicate that the crash happens on browser-close, which isn't as concerning to me.