gecko-dev/ipc
Alex Gaynor 3e8fd2dc07 Bug 1450232 - in IPC, check that lengths fit in the available data before allocating data; r=mccr8
There are three things we want to be true:

a) If the child sends a large value and the parent can't allocate enough space
   for it we use an infallible allocation so the parent dies with an OOM.
b) If a fuzzer generates (huge-length, small-data) we don't try to allocate
   huge-length bytes; knowing that the read will fail.
c) No fuzzer-specific branches in the core IPC serialization code.

Finally, this makes (huge-length, small-data) consistent with other cases where
the data is potentially truncated: ReadParam returns false.

MozReview-Commit-ID: 6nDKrw5z4pt

--HG--
extra : rebase_source : 58372d29139e9545a6ed2852c7243affeab6fdb7
2018-04-19 16:53:29 -04:00
..
app Backed out 3 changesets (bug 1430857) for breaking tests on Windows Code Coverage builds a=backout 2018-02-07 15:02:58 +02:00
chromium Bug 1450232 - in IPC, check that lengths fit in the available data before allocating data; r=mccr8 2018-04-19 16:53:29 -04:00
contentproc Bug 1330529 - Part 3: Protect DLL loads in wmain instead of waiting until PluginProcessChild::Init. r=jimm 2018-02-02 22:53:34 -08:00
glue Bug 1450232 - in IPC, check that lengths fit in the available data before allocating data; r=mccr8 2018-04-19 16:53:29 -04:00
ipdl Bug 1451363 - part 6 - move GetIPCChannel into ProtocolState; r=mccr8 2018-04-23 14:13:36 -04:00
mscom Bug 1411685: Remove another accessibility related diagnostic crash on Nightly. r=aklotz 2018-03-23 15:21:56 -04:00
testshell Bug 1255800 - Make computeThis return a boolean for easier error handling. r=jorendorff 2018-03-23 13:09:04 +01:00
moz.build Bug 1412258 - Get rid of ipc/dbus, r=smaug 2017-10-27 18:41:40 +02:00
pull-chromium.py