Closed Bug 762009 Opened 13 years ago Closed 13 years ago

Investigate if mozIDOMApplicationMgmt implementation leads to security bugs

Categories

(Core :: DOM: Core & HTML, defect)

Product:
Core
Component:
DOM: Core & HTML
Platform:
x86_64
Linux
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: smaug, Assigned: smaug)

Details

(Keywords: sec-audit)

Currently mozIDOMApplicationMgmt is implemented in JS, but it inherits builtinclass interface nsIDOMEventTarget. Code using nsIDOMEventTarget excepts it to be C++. I wonder if it is possible that the current setup leads to some random crashes.
Component: Web Apps → DOM: Mozilla Extensions
Product: Firefox → Core
QA Contact: webapps → general
(In reply to Olli Pettay [:smaug] from comment #0) > excepts expects
Olli: who should investigate this? If not you please find someone, if this is assigned to nobody it'll just rot.
Assignee: nobody → bugs
Keywords: sec-audit
(In reply to Daniel Veditz [:dveditz] from comment #2) > Olli: who should investigate this? If not you please find someone, if this > is assigned to nobody it'll just rot. I'll look at this some more.
The only problematic cases I found are chrome only. nsEventListenerService::Add/RemoveSystemEventListener, nsEventListenerService::HasListenersFor, nsEventListenerService::GetEventTargetChainFor nsDocShell::Get/SetChromeEventHandler Marking this WONTFIX, since mozIDOMApplicationMgmt was changed to not inherit nsIDOMEventTarget.
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → WONTFIX
Calling it "fixed" because you did do the investigation this bug was filed to track.
Group: core-security
Resolution: WONTFIX → FIXED
Component: DOM: Mozilla Extensions → DOM
Component: DOM → DOM: Core & HTML
You need to log in before you can comment on or make changes to this bug.