Closed Bug 1686532 Opened 4 years ago Closed 4 years ago

Add facility for marking dom typed arrays as non-live for the purpose of the hazard analysis

Categories

(Core :: DOM: Bindings (WebIDL), task, P3)

task

Tracking

()

RESOLVED FIXED
86 Branch
Tracking Status
firefox-esr78 85+ fixed
firefox84 --- wontfix
firefox85 + fixed
firefox86 + fixed

People

(Reporter: sfink, Assigned: sfink)

References

Details

(Keywords: sec-other, Whiteboard: [adv-main85-][adv-esr78.7-])

Attachments

(1 file)

I need to split out a bug from bug 1680607 to make things landable incrementally, since that bug now has two patches: one that is needed in order to mark things as not being hazards, and then another to make the hazard analysis check usage of dom::TypedArray_base. I need to land the not-hazard part first, so I'll put it in this bug. Then I can land all of the actual fixes. And only then can I land the expose-hazards part, which I'll leave in bug 1680607.

Note that this is really not a security bug, but I'm marking it as secure since it is part of the constellation of bugs here and could reveal some actual flaws (which this bug is marked as blocking).

Assignee: nobody → sphink
Status: NEW → ASSIGNED
Group: core-security → dom-core-security
Keywords: sec-other
Group: dom-core-security → core-security-release
Status: ASSIGNED → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
Target Milestone: --- → 86 Branch

Comment on attachment 9196900 [details]
Bug 1686532 - Add dom::TypedArray_base::Reset() as a signal to the hazard analysis that no invalidatable data is being held onto

Approved for 85.0b9 and 78.7esr.

Attachment #9196900 - Flags: approval-mozilla-esr78+
Attachment #9196900 - Flags: approval-mozilla-beta+
QA Whiteboard: [post-critsmash-triage]
Flags: qe-verify-
Whiteboard: [adv-main85-]
Whiteboard: [adv-main85-] → [adv-main85-][adv-esr78.7-]
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: