Ok, this is not a sec issue, because gFactoryOps holds strong references to FactoryOp objects, but if we don't do the cleanup, the op is not removed from gFactoryOps array and that leads to a shutdown hang. This all can happen when parent sends PermissionChallenge to the child and the child dies instead of sending PermissionRetry back the parent. I guess the permission stuff is still used by extensions. I can definitely simulate this issue with dom/indexedDB/test/browser_permissionsPromptAllow.js test We should fix it.
Bug 1542541 Comment 0 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
Ok, this is not a sec issue, because gFactoryOps holds strong references to FactoryOp objects, but if we don't do the cleanup, the op is not removed from gFactoryOps array and that leads to a shutdown hang. This all can happen when parent sends PermissionChallenge to the child and the child dies instead of sending PermissionRetry back to the parent. I guess the permission stuff is still used by extensions. I can definitely simulate this issue with dom/indexedDB/test/browser_permissionsPromptAllow.js test. We should fix it.