Closed Bug 1747128 Opened 2 years ago Closed 2 years ago

Missing locks in DoH code

Categories

(Core :: Networking: DNS, defect, P1)

defect

Tracking

()

RESOLVED FIXED
97 Branch
Tracking Status
firefox-esr91 --- wontfix
firefox95 --- wontfix
firefox96 --- wontfix
firefox97 --- fixed

People

(Reporter: jesup, Assigned: jesup)

References

(Blocks 1 open bug)

Details

(Keywords: csectype-race, sec-moderate, Whiteboard: [post-critsmash-triage][post-critsmash-triage][adv-main97+r])

Attachments

(1 file)

There are several spots where we appear to missing required locks in the DoH. This is based on Clang thread-safety static analysis, with the annotations to tell it that all members in ODoHService other than mTTLTimer require the lock, which appears to be the case.

Assignee: nobody → rjesup
Status: NEW → ASSIGNED
Severity: -- → S2
Priority: -- → P1
Whiteboard: [necko-triaged]

This code is not used yet, so no high severity.

Severity: S2 → S3
Group: core-security → core-security-release
Status: ASSIGNED → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Target Milestone: --- → 97 Branch
Flags: qe-verify-
Whiteboard: [necko-triaged] → [necko-triaged][post-critsmash-triage]
Whiteboard: [necko-triaged][post-critsmash-triage] → [post-critsmash-triage][post-critsmash-triage][adv-main97+r]
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: