Add facility for marking dom typed arrays as non-live for the purpose of the hazard analysis
Categories
(Core :: DOM: Bindings (WebIDL), task, P3)
Tracking
()
People
(Reporter: sfink, Assigned: sfink)
References
Details
(Keywords: sec-other, Whiteboard: [adv-main85-][adv-esr78.7-])
Attachments
(1 file)
48 bytes,
text/x-phabricator-request
|
RyanVM
:
approval-mozilla-beta+
RyanVM
:
approval-mozilla-esr78+
|
Details | Review |
I need to split out a bug from bug 1680607 to make things landable incrementally, since that bug now has two patches: one that is needed in order to mark things as not being hazards, and then another to make the hazard analysis check usage of dom::TypedArray_base
. I need to land the not-hazard part first, so I'll put it in this bug. Then I can land all of the actual fixes. And only then can I land the expose-hazards part, which I'll leave in bug 1680607.
Note that this is really not a security bug, but I'm marking it as secure since it is part of the constellation of bugs here and could reveal some actual flaws (which this bug is marked as blocking).
Assignee | ||
Updated•4 years ago
|
Assignee | ||
Comment 1•4 years ago
|
||
Comment 2•4 years ago
|
||
https://hg.mozilla.org/integration/autoland/rev/f08424d4cad3c9b8ad65823ab2af44c9691fd486
https://hg.mozilla.org/mozilla-central/rev/f08424d4cad3
Comment 3•4 years ago
|
||
Comment on attachment 9196900 [details]
Bug 1686532 - Add dom::TypedArray_base::Reset() as a signal to the hazard analysis that no invalidatable data is being held onto
Approved for 85.0b9 and 78.7esr.
Comment 4•4 years ago
|
||
Comment 5•4 years ago
|
||
uplift |
Updated•4 years ago
|
Updated•4 years ago
|
Updated•4 years ago
|
Updated•4 years ago
|
Description
•