mscom::AgileReference should store IID, not REFIID

RESOLVED FIXED in Firefox 56

Status

()

enhancement
RESOLVED FIXED
2 years ago
2 years ago

People

(Reporter: aklotz, Assigned: aklotz)

Tracking

Trunk
mozilla56
Unspecified
Windows
Points:
---

Firefox Tracking Flags

(firefox56 fixed)

Details

Attachments

(1 attachment)

Otherwise we could have a potential UAF when mIid is accessed.
Posted patch s/REFIID/IIDSplinter Review
Assignee: nobody → aklotz
Status: NEW → ASSIGNED
Attachment #8887210 - Flags: review?(jmathies)
Attachment #8887210 - Flags: review?(jmathies) → review+
https://hg.mozilla.org/integration/mozilla-inbound/rev/af4e6769980056fa8a5cebdb9f225ab98d34c2d5
Bug 1381618: Make mscom::AgileReference::mIid be an IID instead of REFIID; r=jimm
https://hg.mozilla.org/mozilla-central/rev/af4e67699800
Status: ASSIGNED → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla56
You need to log in before you can comment on or make changes to this bug.