Closed Bug 560144 Opened 14 years ago Closed 14 years ago

scatter implementation in js shell call JS_SetGlobalObject outside request

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 534308
Tracking Flags:
Tracking Status
status1.9.2 --- final-fixed
blocking1.9.1 --- .8+
status1.9.1 --- .8-fixed

People

(Reporter: igor, Unassigned)

References

Details

(Whiteboard: [sg:dupe 534308] fixed-in-tracemonkey) 

The bug #534051 changed JS_SetGlobalObject to require that the caller must be in request. That exposed a bug in the scatter implementation of js shell that violates precisely that.
Blocks: 534051
No longer blocks: CVE-2010-0160
Status: NEW → RESOLVED
Closed: 14 years ago
No longer depends on: 534051, 536478
Resolution: --- → DUPLICATE
Whiteboard: fixed-in-tracemonkey
Version: 1.9.2 Branch → unspecified
Whiteboard: fixed-in-tracemonkey → [sg:dupe 534308] fixed-in-tracemonkey
Group: core-security
You need to log in before you can comment on or make changes to this bug.