corysanin/tubestation
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bug 1052093 - Child->parent CPOWs should go through COWs in the parent for security (r=bholley)

Browse Source
This commit is contained in:
Bill McCloskey
2014-08-20 12:49:10 -07:00
parent e183624be1
commit 219eb6cb82
7 changed files with 21 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
js/ipc/JavaScriptShared.cpp
View File

@@ -394,8 +394,10 @@ JavaScriptShared::findObjectById(JSContext *cx, uint32_t objId)
}
}
// If there's no TabChildGlobal, we use the junk scope.
JSAutoCompartment ac(cx, xpc::PrivilegedJunkScope());
// If there's no TabChildGlobal, we use the junk scope. In the parent we use
// the unprivileged junk scope to prevent security vulnerabilities. In the
// child we use the privileged junk scope.
JSAutoCompartment ac(cx, defaultScope());
if (!JS_WrapObject(cx, &obj))
return nullptr;
return obj;