Closed
Bug 1336643
Opened 8 years ago
Closed 8 years ago
We release nsCSSValues off-main-thread
Categories
(Core :: CSS Parsing and Computation, defect)
Core
CSS Parsing and Computation
Tracking
()
RESOLVED
WORKSFORME
People
(Reporter: bholley, Unassigned)
References
Details
(Keywords: sec-audit)
Attachments
(1 file)
|
3.26 KB,
text/plain
|
Details |
In bug 1335308, I'm adding some assertions to make sure that we don't call Release() on any nsCSSValue variants that share ownership of data via non-threadsafe refcounts.
https://treeherder.mozilla.org/logviewer.html#?job_id=74417863&repo=try&lineNumber=2116
Not sure if this is a real hazard, but marking s-s to be safe.
|
||
Comment 2•8 years ago
|
||
Yes, that's right. layers::SampleAnimations runs on the compositor thread/process.
Flags: needinfo?(bbirtles)
|
||
Comment 3•8 years ago
|
||
The instance is generated on the compositor thread, and used only on the compositor (if I am missing something).
|
Reporter | |
Comment 4•8 years ago
|
||
Per comment 3, this isn't a security issue.
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → WORKSFORME
|
||
Updated•5 years ago
|
Group: core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•