Closed Bug 1720733 Opened 4 years ago Closed 4 years ago

Try to ensure SessionHistoryEntry::mFrameLoader isn't replaced accidentally

Categories

(Core :: DOM: Navigation, defect, P3)

defect

Tracking

()

RESOLVED FIXED
92 Branch
Tracking Status
firefox92 --- fixed

People

(Reporter: smaug, Assigned: smaug)

Details

Attachments

(1 file)

I think there is one racy case when it may be replaced and thus Destroy on the old frameloader isn't called.
I believe the problematic case can happen if we have just started a new normal load (and already stored frameloader) and then do a session history load.

Patch coming

Severity: -- → S3
Priority: -- → P3

I don't have a test for this, since the race condition is super hard to trigger.
The patch is based on code auditing.

The patch just prevents bfcaching if we're in middle of another load.

Pushed by pvanderbeken@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/b68a422ad620 Try to ensure SessionHistoryEntry::mFrameLoader isn't replaced accidentally, r=peterv
Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
Target Milestone: --- → 92 Branch
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: