95394 – JSNPObject doesn't always protect its data when calling into plugin code

RESOLVED FIXED 95394

JSNPObject doesn't always protect its data when calling into plugin code

https://bugs.webkit.org/show_bug.cgi?id=95394

Summary JSNPObject doesn't always protect its data when calling into plugin code

Mark Hahnenberg

Reported 2012-08-29 15:53:21 PDT

We need to use NPRuntimeObjectMap::PluginProtector when calling into plugin code since there's no telling what the plugin will do, including destroying itself.

Attachments
Patch (2.58 KB, patch) 2012-08-29 18:08 PDT, Mark Hahnenberg	beidson: review+	Details Formatted Diff Diff
View All Add attachment proposed patch, testcase, etc.

Mark Hahnenberg

Comment 1 2012-08-29 18:08:19 PDT

Created attachment 161376 [details] Patch

Mark Hahnenberg

Comment 2 2012-08-30 10:40:45 PDT

Committed r127158: <http://trac.webkit.org/changeset/127158>

Note You need to log in before you can comment on or make changes to this bug.

Status RESOLVED

Resolution FIXED

Priority P2

Severity Normal

Classification Unclassified

Version 528+ (Nightly build)

Hardware Unspecified

OS Unspecified

Product WebKit

Component JavaScriptCore

Assignee

Mark Hahnenberg

Reported

2012-08-29 15:53 PDT

Modified

2012-08-30 10:40 PDT History

CC List

3 users Show

URL

Keywords

Depends on

Blocks