Closed Bug 1338319 Opened 7 years ago Closed 6 years ago

Add tests for the various codepaths added in bug 1141979

Categories

(Core :: DOM: Core & HTML, defect, P3)

defect

Tracking

()

RESOLVED WONTFIX
Tracking Status
firefox54 --- affected

People

(Reporter: bzbarsky, Assigned: kaku)

References

Details

(Keywords: sec-other)

Bug 1141979 added various untested codepaths, some of which corrupt memory and crash if executed.  See bug 1328861 comment 12.

Please add tests for all the relevant codepaths.
Flags: needinfo?(kaku)
And note that I'm going to try to make this hard to mess up in bug 1328861, but we should still have tests for these codepaths.
(In reply to Boris Zbarsky [:bz] (still a bit busy) from comment #0)
> Bug 1141979 added various untested codepaths, some of which corrupt memory
> and crash if executed.  See bug 1328861 comment 12.
> 
> Please add tests for all the relevant codepaths.

Sure.
Assignee: nobody → kaku
Flags: needinfo?(kaku)
Note that I'm about to change NS_ERROR_TYPE_ERR to not be special for ErrorResult.  If your intent is to throw a TypeError, you should do that....
Keywords: sec-other
(In reply to Boris Zbarsky [:bz] (still a bit busy) from comment #3)
> Note that I'm about to change NS_ERROR_TYPE_ERR to not be special for
> ErrorResult.  If your intent is to throw a TypeError, you should do that....

Is it Bug 1339540? could you please cc me at Bug 1339540 because I'm not granted to access all security bugs...
Flags: needinfo?(bzbarsky)
Depends on: CVE-2017-5401
(In reply to Tzuhao Kuo [:kaku] from comment #4)
> Is it Bug 1339540? could you please cc me at Bug 1339540 because I'm not
> granted to access all security bugs...

Done.
Flags: needinfo?(bzbarsky)
(In reply to Andrew McCreight [:mccr8] from comment #5)
> (In reply to Tzuhao Kuo [:kaku] from comment #4)
> > Is it Bug 1339540? could you please cc me at Bug 1339540 because I'm not
> > granted to access all security bugs...
> 
> Done.

Thanks.
Depends on: 1339540
Kaku, do you plan to work on this some time soon?
Flags: needinfo?(kaku)
Priority: -- → P2
(In reply to Andrew Overholt [:overholt] from comment #7)
> Kaku, do you plan to work on this some time soon?

I would like to remove all codes intruduced in bug 1141979 instead as the spec of ImageBitmap-extensions has been obsoleted, see https://w3c.github.io/mediacapture-worker/.

Also, bug 1348219 commnet 6 and bug 1348219 commnet 7 suggested that we remove them all.

Thoughts?
Flags: needinfo?(kaku)
Moving to p3 because no activity for at least 1 year(s).
See https://github.com/mozilla/bug-handling/blob/master/policy/triage-bugzilla.md#how-do-you-triage for more information
Priority: P2 → P3
Bug 1500733 removed this code.
Group: dom-core-security
Depends on: 1500733
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → WONTFIX
Component: DOM → DOM: Core & HTML
You need to log in before you can comment on or make changes to this bug.