Closed Bug 1746323 Opened 2 years ago Closed 2 years ago

Missing lock in PromiseWorkerProxy::Create()

Categories

(Core :: DOM: Workers, defect, P2)

defect

Tracking

()

RESOLVED FIXED
97 Branch
Tracking Status
firefox-esr91 --- wontfix
firefox95 --- wontfix
firefox96 --- wontfix
firefox97 --- fixed

People

(Reporter: jesup, Assigned: jesup)

References

(Blocks 1 open bug)

Details

(Keywords: sec-other, Whiteboard: [post-critsmash-triage][adv-main97+r])

Attachments

(1 file)

We should be locking before calling CleanupProperties() in the error case where a worker is in mid-shutdown when we try to call PromiseWorkerProxy::Create()

Assignee: nobody → rjesup
Status: NEW → ASSIGNED
Severity: -- → S3
Priority: -- → P2
Group: core-security → dom-core-security

There doesn't seem to be any actual issue here, since the lock is missing from case when the ::Create method fails and nothing has been posted to another thread.

I removed sec-moderate, since I can't see what a concrete security issue could be here.
Add it back if I missed something :)

Group: dom-core-security → core-security-release
Status: ASSIGNED → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Target Milestone: --- → 97 Branch

Per IRL discussion with Randell, this is mostly cleanup and not likely affecting us in the wild in a way which would make us want to backport.

Regressions: 1747941
Flags: qe-verify-
Whiteboard: [post-critsmash-triage]
Whiteboard: [post-critsmash-triage] → [post-critsmash-triage][adv-main97+r]
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: