Closed
Bug 1495738
Opened 6 years ago
Closed 6 years ago
Image cache entry should not be reused when Cache-Control header is received
Categories
(Core :: Graphics: ImageLib, defect, P3)
Core
Graphics: ImageLib
Tracking
()
RESOLVED
FIXED
mozilla64
Tracking | Status | |
---|---|---|
firefox64 | --- | fixed |
People
(Reporter: baku, Assigned: baku)
References
Details
Attachments
(1 file)
1.50 KB,
patch
|
aosmond
:
review+
|
Details | Diff | Splinter Review |
I managed to reproduce a race condition where a cached image is used also when the Cache-Control header has been received This happens because we consider valid cache entries, images with no-cache header if used in the same document. This comparison is based on a loadID which is the document's pointer. But that pointer can be reused for another document and we end up exposing a cached image when we should not.
Assignee | ||
Comment 1•6 years ago
|
||
Attachment #9013606 -
Flags: review?(aosmond)
Updated•6 years ago
|
Attachment #9013606 -
Flags: review?(aosmond) → review+
Updated•6 years ago
|
Priority: -- → P3
Pushed by amarchesini@mozilla.com:
https://hg.mozilla.org/integration/mozilla-inbound/rev/135eaacf1dfc
Image cache entry should compare the window ID together with the loadID because the loadID can be a reused pointer, r=aosmond
Comment 3•6 years ago
|
||
bugherder |
Status: NEW → RESOLVED
Closed: 6 years ago
status-firefox64:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla64
You need to log in
before you can comment on or make changes to this bug.
Description
•