Open Bug 936671 Opened 9 years ago Updated 2 years ago

ObjectActor#getPrototypeAndProperties can cause debuggee code to run


(DevTools :: Debugger, defect, P3)



(Not tracked)


(Reporter: bbenvie, Unassigned)


(Blocks 1 open bug)


Given the following object:

> Object.create(null, {
>   unsafe: {
>     get: (() => "I'm dangerous").bind()
>   }
> });

ObjectActor#getPrototypeAndProperties will invoke debuggee code. The heuristic that determines whether something is a safe getter relies checking for the presence of "code" on the Debugger.Object. Bound functions have no "code", but they do call into debuggee code.
This would be solved by bug 746622 which would make it possible to determine whether a given Debugger.Object is a bound function.
Depends on: 746622
Summary: ObjectActor#getPrototypeAndProperties runs debuggee code with bound getters → ObjectActor#getPrototypeAndProperties can cause debuggee code to run
Product: Firefox → DevTools
Logan, what do you think the right prioritization is here?
Flags: needinfo?(lsmyth)

My vote is P3.

Flags: needinfo?(lsmyth)
Priority: P2 → P3
Blocks: dbg-server
You need to log in before you can comment on or make changes to this bug.