Closed Bug 2015157 Opened 7 months ago Closed 7 months ago

Wrong check logic in ActorsParent.cpp allows bypassing parameter validation

Categories

(Core :: Storage: IndexedDB, defect)

defect

Tracking

()

RESOLVED DUPLICATE of bug 2014101

People

(Reporter: decoder, Unassigned)

Details

The check here:

https://searchfox.org/firefox-main/rev/997d55938096e03a72bfedb57279d42a62cd1467/dom/indexedDB/ActorsParent.cpp#10631

looks wrong. This should be !aTrustParams so the check is run when the parameters are not trusted (see also the comment a bit above).

Kagami spotted this while looking at another bug report: https://bugzilla.mozilla.org/show_bug.cgi?id=2014101#c3

Status: NEW → RESOLVED
Closed: 7 months ago
Duplicate of bug: CVE-2026-2768
Resolution: --- → DUPLICATE
Group: dom-core-security
You need to log in before you can comment on or make changes to this bug.