Closed Bug 1782703 Opened 2 years ago Closed 2 years ago

Add missing lookup check to WebGPUParent::RecvSwapChainDestroy

Categories

(Core :: Graphics: WebGPU, defect)

defect

Tracking

()

RESOLVED FIXED
105 Branch
Tracking Status
firefox-esr91 --- disabled
firefox-esr102 --- disabled
firefox103 --- disabled
firefox104 --- disabled
firefox105 --- fixed

People

(Reporter: decoder, Assigned: decoder)

Details

(Keywords: sec-other)

Attachments

(1 file)

WebGPUParent::RecvSwapChainDestroy performs a lookup in mCanvasMap without checking the result. Like in RecvSwapChainPresent we should handle the error.

This bug itself is not s-s but keeping it locked until we unhide all the IPC bugs.

Group: gfx-core-security → core-security-release
Status: ASSIGNED → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Target Milestone: --- → 105 Branch
QA Whiteboard: [post-critsmash-triage]
Flags: qe-verify-
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: