Closed
Bug 1720733
Opened 4 years ago
Closed 4 years ago
Try to ensure SessionHistoryEntry::mFrameLoader isn't replaced accidentally
Categories
(Core :: DOM: Navigation, defect, P3)
Core
DOM: Navigation
Tracking
()
RESOLVED
FIXED
92 Branch
| Tracking | Status | |
|---|---|---|
| firefox92 | --- | fixed |
People
(Reporter: smaug, Assigned: smaug)
Details
Attachments
(1 file)
I think there is one racy case when it may be replaced and thus Destroy on the old frameloader isn't called.
I believe the problematic case can happen if we have just started a new normal load (and already stored frameloader) and then do a session history load.
Patch coming
| Assignee | ||
Updated•4 years ago
|
Severity: -- → S3
Priority: -- → P3
| Assignee | ||
Comment 1•4 years ago
|
||
I don't have a test for this, since the race condition is super hard to trigger.
The patch is based on code auditing.
The patch just prevents bfcaching if we're in middle of another load.
Pushed by pvanderbeken@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/b68a422ad620
Try to ensure SessionHistoryEntry::mFrameLoader isn't replaced accidentally, r=peterv
Comment 3•4 years ago
|
||
| bugherder | ||
Status: NEW → RESOLVED
Closed: 4 years ago
status-firefox92:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 92 Branch
You need to log in
before you can comment on or make changes to this bug.
Description
•