Closed Bug 1895942 Opened 9 months ago Closed 9 months ago

[wpt-sync] Sync PR 46187 - VT: Fix UAF in tokenizer parsing

Categories

(Core :: Layout: Generated Content, Lists, and Counters, task, P4)

Product:
Core
Component:
Layout: Generated Content, Lists, and Counters
Type:
task

Tracking

()

Status:
RESOLVED FIXED
Milestone:
128 Branch
Tracking Flags:
Tracking Status
firefox128 --- fixed

People

(Reporter: wpt-sync, Unassigned)

References

(
URL
)

Details

(Whiteboard: [wptsync downstream])

Sync web-platform-tests PR 46187 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/46187
Details from upstream follow.

Vladimir Levin <vmpstr@chromium.org> wrote:

VT: Fix UAF in tokenizer parsing

R=khushalsagar@chromium.org

Bug: 339458177
Change-Id: I4c62ecc74402a0affc076eb205eeeb8c6687e709
Reviewed-on: https://chromium-review.googlesource.com/5528856
WPT-Export-Revision: af5ba09d66e9630b89e059590a400bdb32e6a0e3

Component: web-platform-tests → Layout: Generated Content, Lists, and Counters
Product: Testing → Core

CI Results

Ran 0 Firefox configurations based on mozilla-central, and Safari on GitHub CI

Total 1 tests

Status Summary

Safari

PASS: 1

Links

GitHub PR Head
GitHub PR Base

Pushed by wptsync@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/e2a7e7ca4075 [wpt PR 46187] - VT: Fix UAF in tokenizer parsing, a=testonly

https://hg.mozilla.org/mozilla-central/rev/e2a7e7ca4075

Status: NEW → RESOLVED
Closed: 9 months ago
status-firefox128: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 128 Branch
You need to log in before you can comment on or make changes to this bug.