Closed Bug 1849056 Opened 2 years ago Closed 2 years ago

Need to handle allocation failures when using `CryptoBuffer::ToArrayBuffer()`

Categories

(Core :: DOM: Web Authentication, defect, P3)

defect

Tracking

()

RESOLVED FIXED
118 Branch
Tracking Status
firefox-esr102 --- wontfix
firefox-esr115 118+ fixed
firefox116 --- wontfix
firefox117 --- wontfix
firefox118 + fixed

People

(Reporter: jschanck, Assigned: jschanck)

References

Details

(Keywords: sec-low, Whiteboard: [adv-main118-][adv-esr115.3-])

Attachments

(1 file)

No description provided.
Pushed by jschanck@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/536420808253 handle failures of CryptoBuffer::ToArrayBuffer. r=tschuster,webidl,smaug
Backout by nbeleuzu@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/16e06af20b97 Backed out changeset 536420808253 for bustages on AuthenticatorResponse.cpp

Push with failure
Failure log

dom/webauthn/AuthenticatorResponse.cpp:41:10: error: member access into incomplete type 'ErrorResult'

Flags: needinfo?(jschanck)
Flags: needinfo?(jschanck)
Pushed by jschanck@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/08d512674485 handle failures of CryptoBuffer::ToArrayBuffer. r=tschuster,webidl,smaug

https://hg.mozilla.org/mozilla-central/rev/08d512674485

John, which other branches are impacted by this bug? And can we get a sec rating on this?

Group: crypto-core-security → core-security-release
Status: ASSIGNED → RESOLVED
Closed: 2 years ago
Flags: needinfo?(jschanck)
Resolution: --- → FIXED
Target Milestone: --- → 118 Branch

Sorry, I thought I had tagged this as sec-low already. All branches are affected.

Flags: needinfo?(jschanck)
Keywords: sec-low
QA Whiteboard: [post-critsmash-triage]
Flags: qe-verify-

Please nominate this for ESR115 approval. It grafts cleanly.

Flags: needinfo?(jschanck)

Comment on attachment 9349313 [details]
Bug 1849056 - handle failures of CryptoBuffer::ToArrayBuffer. r?tschuster

ESR Uplift Approval Request

  • If this is not a sec:{high,crit} bug, please state case for ESR consideration:
  • User impact if declined: None
  • Fix Landed on Version: 118
  • Risk to taking this patch: Low
  • Why is the change risky/not risky? (and alternatives if risky): The patch has been tested on Nightly and only affects error handling under extreme memory pressure.
Flags: needinfo?(jschanck)
Attachment #9349313 - Flags: approval-mozilla-esr115?

Comment on attachment 9349313 [details]
Bug 1849056 - handle failures of CryptoBuffer::ToArrayBuffer. r?tschuster

Approved for 118.0b7, thanks.

Attachment #9349313 - Flags: approval-mozilla-esr115? → approval-mozilla-esr115+
Whiteboard: [adv-main118-]
Whiteboard: [adv-main118-] → [adv-main118-][adv-esr115.3-]
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: