Support [Tainted] annotations on individual types (in parameters)
Categories
(Core :: IPC, task)
Tracking
()
| Tracking | Status | |
|---|---|---|
| firefox161 | --- | fixed |
People
(Reporter: tschuster, Assigned: tschuster)
References
(Blocks 2 open bugs)
Details
Attachments
(2 external files, 1 obsolete file)
Especially for nsIPrincipal it would be useful to have a [Tainted] annotation per type instead of per method. That means any additional usage of the type will automatically require tainting. Doing this for parameters seems quite easy, so I will go for that first. We can add support for types inside structs/unions afterwards.
One thing I wasn't quite sure about is if we should make tained type move-only, I think it might be a good idea because otherwise we might get a bunch of additional Add/Release calls due to introduction of RefPtr<nsIPrincipal> instead of nsIPrincipal*.
| Assignee | ||
Comment 1•1 month ago
|
||
Updated•1 month ago
|
| Assignee | ||
Comment 2•1 month ago
|
||
Updated•1 month ago
|
| Assignee | ||
Comment 3•26 days ago
|
||
Ok tests previously only checked that compilation succeeded, so they could
not tell whether [Tainted] types ended up tainted on the right side.
Comment 4•13 days ago
|
||
Comment on attachment 9653500 [details]
Bug 2078278 - Use tainting exclusively for PContent::LoadURIExternal
Revision D331089 was moved to bug 2087980. Setting attachment 9653500 [details] to obsolete.
Comment 6•12 days ago
|
||
| bugherder | ||
https://hg.mozilla.org/mozilla-central/rev/aca3c357510d
https://hg.mozilla.org/mozilla-central/rev/cdeb0e67cb5f
Description
•