Debugger breakpoints should switch back to main stack when on suspendable code
Categories
(Core :: JavaScript: WebAssembly, defect, P2)
Tracking
()
| Tracking | Status | |
|---|---|---|
| firefox133 | --- | fixed |
People
(Reporter: rhunt, Assigned: yury)
References
(Blocks 1 open bug)
Details
Attachments
(2 files, 1 obsolete file)
Our debuggable code using baseline generates handlers for breakpoints which call out to the Debugger API. That API can lead to arbitrary code running. If our debuggable code is running on a suspendable stack, this could lead to JS code running unexpectedly.
This is very similar to bug 1898029.
| Assignee | ||
Comment 1•1 year ago
|
||
Comment 2•1 year ago
|
||
Comment on attachment 9407965 [details]
Bug 1898031 - Debugger breakpoints should switch back to main stack. r?rhunt
Revision D214001 was moved to bug 1898032. Setting attachment 9407965 [details] to obsolete.
Updated•1 year ago
|
| Assignee | ||
Comment 3•1 year ago
|
||
Depends on D214001
Updated•1 year ago
|
Comment 4•1 year ago
|
||
Comment on attachment 9418229 [details]
Bug 1898031 - Fix JIT activation binding in DebuggerFrame. r?jandem
Revision D218246 was moved to bug 1898032. Setting attachment 9418229 [details] to obsolete.
Comment 5•1 year ago
|
||
There is an r+ patch which didn't land and no activity in this bug for 2 weeks.
:yury, could you have a look please?
If you still have some work to do, you can add an action "Plan Changes" in Phabricator.
For more information, please visit BugBot documentation.
Updated•1 year ago
|
| Assignee | ||
Comment 6•1 year ago
|
||
Comment 7•1 year ago
|
||
Comment on attachment 9421586 [details]
Bug 1898031 - Neglect suspendable stack roots on shutdown. r?iain
Revision D220575 was moved to bug 1915677. Setting attachment 9421586 [details] to obsolete.
Updated•1 year ago
|
| Assignee | ||
Updated•1 year ago
|
Comment 9•1 year ago
|
||
Backed out for causing build bustages @ WasmPI.cpp
Backout link: https://hg.mozilla.org/integration/autoland/rev/22ba881d768516d2a44c65831c521145dc7fffa8
Comment 10•1 year ago
|
||
Comment 11•1 year ago
|
||
| bugherder | ||
https://hg.mozilla.org/mozilla-central/rev/42a59cca5fad
https://hg.mozilla.org/mozilla-central/rev/7f5c95da844a
Comment 12•1 year ago
|
||
Backed out 2 changesets (Bug 1898031) for causing failures in test_wasm_jspi_profiler.js CLOSED TREE
This started to perma fail on this merge
https://hg.mozilla.org/integration/autoland/rev/c6fe661ddb030b53a79608a7b674be6741f0eb28
Comment 13•1 year ago
|
||
Comment 14•1 year ago
|
||
| bugherder | ||
https://hg.mozilla.org/mozilla-central/rev/8f1191ffa393
https://hg.mozilla.org/mozilla-central/rev/d48408e0b29e
| Assignee | ||
Updated•1 year ago
|
Description
•