Closed Bug 2078278 Opened 1 month ago Closed 12 days ago

Support [Tainted] annotations on individual types (in parameters)

Categories

(Core :: IPC, task)

task

Tracking

()

RESOLVED FIXED
161 Branch
Tracking Status
firefox161 --- fixed

People

(Reporter: tschuster, Assigned: tschuster)

References

(Blocks 2 open bugs)

Details

Attachments

(2 external files, 1 obsolete file)

Especially for nsIPrincipal it would be useful to have a [Tainted] annotation per type instead of per method. That means any additional usage of the type will automatically require tainting. Doing this for parameters seems quite easy, so I will go for that first. We can add support for types inside structs/unions afterwards.

One thing I wasn't quite sure about is if we should make tained type move-only, I think it might be a good idea because otherwise we might get a bunch of additional Add/Release calls due to introduction of RefPtr<nsIPrincipal> instead of nsIPrincipal*.

Blocks: 1913782
Attachment #9653116 - Attachment description: WIP: Bug 2078278 - Support [Tainted] annotations on individual types (in parameters). → Bug 2078278 - Support [Tainted] annotations on individual C++ types (in parameters). r?nika
Attachment #9653500 - Attachment description: WIP: Bug 2078278 - Use tainting exclusively for PContent::LoadURIExternal → Bug 2078278 - Use tainting exclusively for PContent::LoadURIExternal

Ok tests previously only checked that compilation succeeded, so they could
not tell whether [Tainted] types ended up tainted on the right side.

Blocks: 2087980

Comment on attachment 9653500 [details]
Bug 2078278 - Use tainting exclusively for PContent::LoadURIExternal

Revision D331089 was moved to bug 2087980. Setting attachment 9653500 [details] to obsolete.

Attachment #9653500 - Attachment is obsolete: true
Pushed by tschuster@mozilla.com: https://github.com/mozilla-firefox/firefox/commit/36ee783d0f3f https://hg.mozilla.org/integration/autoland/rev/aca3c357510d Support [Tainted] annotations on individual C++ types (in parameters). r=nika,ipc-reviewers https://github.com/mozilla-firefox/firefox/commit/cc2456c75dee https://hg.mozilla.org/integration/autoland/rev/cdeb0e67cb5f Check which actor side gets Tainted<> in IPDL ok tests. r=nika,ipc-reviewers
Status: NEW → RESOLVED
Closed: 12 days ago
Resolution: --- → FIXED
Target Milestone: --- → 161 Branch
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: