Check string type max capacity before attempting to adopt memory in `nsDOMDataChannel::Send`
Categories
(Core :: WebRTC: Networking, defect, P1)
Tracking
()
Tracking | Status | |
---|---|---|
firefox83 | --- | fixed |
People
(Reporter: padenot, Assigned: padenot)
References
Details
Crash Data
Attachments
(3 files)
Strings can have less capacity than arraybuffers, depending on the type.
Assignee | ||
Comment 1•3 years ago
|
||
Updated•3 years ago
|
Assignee | ||
Comment 2•3 years ago
|
||
Depends on D91928
Assignee | ||
Comment 3•3 years ago
|
||
Depends on D91929
Comment 4•3 years ago
|
||
Apologies for the tweet but I filed that three years ago, so I figured that's okay to post...
https://bugzilla.mozilla.org/show_bug.cgi?id=1382779
Assignee | ||
Comment 5•3 years ago
|
||
Updated•3 years ago
|
Pushed by padenot@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/eaa857f4564d Use fallible string operations in nsDOMDataChannel::Send. r=bwc https://hg.mozilla.org/integration/autoland/rev/9f6b8aa11110 Use fallible string operations in WebSocket::Send. r=valentin https://hg.mozilla.org/integration/autoland/rev/3097e934187b Test that DataChannel.send fails gracefully when the argument is too big. r=bwc
Comment 8•3 years ago
|
||
Backed out 3 changesets (bug 1668248) for Devtools failures in devtools/shared/resources/tests/browser_resources_websocket.js. CLOSED TREE
Log:
https://treeherder.mozilla.org/logviewer.html#/jobs?job_id=317308592&repo=autoland&lineNumber=4944
Push with failures:
https://treeherder.mozilla.org/#/jobs?repo=autoland&group_state=expanded&revision=2a72b40ba26afd7c43f0bb39f25274683a41171f
Backout:
https://hg.mozilla.org/integration/autoland/rev/70590d692947770cf1b09ff0d0d917b0e47afe95
Assignee | ||
Updated•3 years ago
|
Pushed by padenot@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/6f557d78a36d Use fallible string operations in nsDOMDataChannel::Send. r=bwc https://hg.mozilla.org/integration/autoland/rev/fc35315d5e8e Use fallible string operations in WebSocket::Send. r=valentin https://hg.mozilla.org/integration/autoland/rev/cf7ae63672c8 Test that DataChannel.send fails gracefully when the argument is too big. r=bwc
Updated•3 years ago
|
Comment 10•3 years ago
|
||
bugherder |
https://hg.mozilla.org/mozilla-central/rev/6f557d78a36d
https://hg.mozilla.org/mozilla-central/rev/fc35315d5e8e
https://hg.mozilla.org/mozilla-central/rev/cf7ae63672c8
Description
•