gecko-dev/dom
JW Wang 29bae87780 Bug 1428684 - reduce the chance of UAF when changing states of MDSM. r=kaku
SetState() will delete the current state object and UAF will happen if members
are accessed after this call. However, sometimes it is not obvious if SetState()
is called indirectly as we do in MaybeFinishSeek().

To make it less error-prone, we will keep the old state object alive for a bit
longer and set mMaster to null to catch potential UAF.

MozReview-Commit-ID: Aqxj92ETjti

--HG--
extra : rebase_source : 21b4a0b6df2b1723eed01b6c9d58b33b8dcc6405
2018-01-08 11:41:59 +08:00
..
abort Bug 1421992 - script-generated patch to replace do_check_* functions with their Assert.* equivalents, rs=Gijs. 2017-12-21 11:08:17 +01:00
animation Bug 1421507 - Throttle animations in position:fixed element that the element is out of view. r=boris,tnikkel 2018-01-05 10:30:46 +09:00
asmjscache
audiochannel
base Merge mozilla-central to autoland, r=merge a=merge on a CLOSED TREE 2018-01-09 00:16:46 +02:00
battery
bindings Merge mozilla-central to autoland, r=merge a=merge on a CLOSED TREE 2018-01-09 00:16:46 +02:00
broadcastchannel
browser-element Bug 1409449 - Update test for bug 1409449. r=:ckerschb 2017-12-12 10:34:42 +01:00
cache Bug 1419771 - Introduce DOMPrefs, a thread-safe access to preferences for DOM - part 9 - ServiceWorker testing enabled, r=asuth 2018-01-08 14:05:04 +01:00
canvas Bug 1419771 - Introduce DOMPrefs, a thread-safe access to preferences for DOM - part 15 - Offscreen Canvas enabled, r=asuth 2018-01-08 14:05:05 +01:00
clients Bug 1425975 P14 Assert that storage is allowed when a ClientSource is both execution ready and controlled. r=asuth 2018-01-05 12:10:22 -05:00
commandhandler
console Bug 1419771 - Introduce DOMPrefs, a thread-safe access to preferences for DOM - part 20 - DevTools enabled, r=asuth 2018-01-08 14:05:06 +01:00
credentialmanagement
crypto
encoding Bug 1421992 - Hand written cleanup patch to make tests pass after removing obsolete xpcshell functions. r=Gijs,ochameau a=Aryx 2017-12-21 11:11:57 +01:00
events Bug 1419803 - Use GetComposedDoc instead of GetUncomposedDoc in ContentEventHandler. r=smaug 2018-01-08 01:31:00 +02:00
fetch Bug 1419771 - Introduce DOMPrefs, a thread-safe access to preferences for DOM - part 18 - FetchObserver API enabled, r=asuth 2018-01-08 14:05:05 +01:00
file Bug 1427091 - BlobSet must use nsCString instead of nsAutoCString, r=me 2018-01-05 15:38:06 +01:00
filehandle
filesystem Bug 1419771 - Introduce DOMPrefs, a thread-safe access to preferences for DOM - part 16 - Webkit/Blink directory picker enabled, r=asuth 2018-01-08 14:05:05 +01:00
flex Backed out 5 changesets (bug 1409083) for eslint failures 2017-12-07 19:47:09 -08:00
gamepad Bug 1397194 - Polling manually in macOS gamepad API backend r=qdot 2017-12-06 14:20:33 +08:00
geolocation
grid Bug 1423378 Part 3: Duplicate repeat auto-fit test into a repeat auto-fill test (with slightly different expected values). r=mats 2017-12-20 10:54:46 -08:00
html Bug 1361369 - Allow async attribute on inline module scripts r=smaug 2018-01-08 15:17:34 +00:00
imptests
indexedDB Bug 1421992 - Hand written cleanup patch to make tests pass after removing obsolete xpcshell functions. r=Gijs,ochameau a=Aryx 2017-12-21 11:11:57 +01:00
interfaces merge central to autoland. r=merge a=merge 2018-01-06 01:54:50 +02:00
ipc Bug 1419771 - Introduce DOMPrefs, a thread-safe access to preferences for DOM - part 22 - DOMPrefs initialized at startup, r=asuth 2018-01-08 14:05:07 +01:00
jsurl
locales Bug 1330688 - Report a better error in the console when a module load fails r=baku r=flod 2017-12-19 15:29:38 +00:00
manifest
mathml Bug 1423990: Move the last few attribute-related methods outside of nsIContent. r=bz 2017-12-25 17:50:10 +01:00
media Bug 1428684 - reduce the chance of UAF when changing states of MDSM. r=kaku 2018-01-08 11:41:59 +08:00
messagechannel
network Bug 1419771 - Introduce DOMPrefs, a thread-safe access to preferences for DOM - part 17 - Network Information enabled, r=asuth 2018-01-08 14:05:05 +01:00
notification Bug 1419771 - Introduce DOMPrefs, a thread-safe access to preferences for DOM - part 7 - Notification Request-Interaction enabled, r=asuth 2018-01-08 14:05:04 +01:00
offline Backed out changeset e2beba7e6875 (bug 1423798) for failing Browser Chrome tests browser_temporary_permissions_expiry.js on Windows 7 debug. r=backout on a CLOSED TREE 2017-12-09 07:23:35 +02:00
payments
performance Bug 1419771 - Introduce DOMPrefs, a thread-safe access to preferences for DOM - part 5 - Performance logging enabled, r=asuth 2018-01-08 14:05:04 +01:00
permission
plugins backout Bug 1414204 because of regressions, r=backout 2018-01-03 18:42:13 +02:00
power
presentation Bug 1426887 - Avoid adding/removing streams to nsMultiplexInputStream when reading in Presentation API, r=jdm 2017-12-30 12:47:12 +01:00
promise Bug 1421992 - script-generated patch to replace do_execute_soon, do_print and do_register_cleanup with executeSoon, info and registerCleanupFunction, rs=Gijs. 2017-12-21 11:10:23 +01:00
push Bug 1419771 - Introduce DOMPrefs, a thread-safe access to preferences for DOM - part 12 - Push enabled, r=asuth 2018-01-08 14:05:05 +01:00
quota Bug 1419771 - Introduce DOMPrefs, a thread-safe access to preferences for DOM - part 10 - StorageManager enabled, r=asuth 2018-01-08 14:05:04 +01:00
res
script Bug 1426189 - Make document.currentScript null in modules r=baku 2018-01-08 18:07:39 +00:00
secureelement
security Bug 1425968 - Skip HSTS browser-chrome tests because the feature is being removed and they depend on an expiring Telemetry probe. r=kmckinley 2018-01-03 16:46:35 -05:00
smil Bug 1423098 - Drop support for SMIL accessKey; r=dholbert 2017-12-14 09:58:32 -06:00
storage
svg Bug 1361369 - Allow async attribute on inline module scripts r=smaug 2018-01-08 15:17:34 +00:00
system
tests Bug 1428244 - Part 2: Set correct oldValue/newValue for the attributeChangedCallback which is fired from style attribute change; r=smaug 2017-12-15 11:52:07 -06:00
time
u2f Bug 1247124 - Limit FIDO U2F to Secure Contexts r=ttaubert,smaug 2017-12-13 17:02:38 -06:00
url Backed out 9 changesets (bug 1412456) for crashing talos g2 and unexpected network connections in browser-chrome's browser_searchEngine_behaviors.js r=backout a=backout on a CLOSED TREE 2017-12-07 12:20:21 +02:00
vr
webauthn Bug 1420763 - encode webauthn keys as a COSE key; r=keeler 2018-01-04 14:05:14 -07:00
webbrowserpersist Bug 1394734 - Replace CONFIG['GNU_C*'] by CONFIG['CC_TYPE'] r=glandium 2017-12-07 22:09:15 +01:00
webidl Merge mozilla-central to autoland, r=merge a=merge on a CLOSED TREE 2018-01-09 00:16:46 +02:00
websocket
workers Bug 1419771 - Introduce DOMPrefs, a thread-safe access to preferences for DOM - part 21 - Get rid of WorkerPrefs.h, r=asuth 2018-01-08 14:05:07 +01:00
worklet Bug 1419771 - Introduce DOMPrefs, a thread-safe access to preferences for DOM - part 1 - dump enabled, r=asuth 2018-01-08 14:05:03 +01:00
xbl Bug 1425321 - Renaming nsINode::RemoveChildAt to RemoveChildAt_Deprecated, r=catalinb 2018-01-03 14:01:03 +01:00
xhr Bug 1407858 part 1. Give DOMString setter APIs clearer names. r=smaug 2017-12-22 13:02:51 -05:00
xml Bug 1426234 part 3. Simplify ProcessStyleLink now that it's only called for Link headers. r=mystor 2017-12-21 16:43:24 -05:00
xslt Merge mozilla-central to autoland. r=merge a=merge on a CLOSED TREE 2018-01-03 23:59:59 +02:00
xul Bug 1426525 part 5. Remove the 'ref' getter/setter on XULElement. r=smaug 2018-01-05 13:48:39 -05:00
jar.mn
moz.build Backed out 5 changesets (bug 1409083) for eslint failures 2017-12-07 19:47:09 -08:00