Firefox · DOM
CVE-2025-1009
UAF in DOM
Overview
High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Files Changed
dom/xslt/xslt/txMozillaXSLTProcessor.cpp
Patch
diff --git a/dom/xslt/xslt/txMozillaXSLTProcessor.cpp b/dom/xslt/xslt/txMozillaXSLTProcessor.cpp
index 5fe01a2a9f1..fc6b3a8e2d2 100644
--- a/dom/xslt/xslt/txMozillaXSLTProcessor.cpp
+++ b/dom/xslt/xslt/txMozillaXSLTProcessor.cpp
@@ -501,6 +501,10 @@ void txMozillaXSLTProcessor::ImportStylesheet(nsINode& aStyle,
return;
}
+ MOZ_ASSERT(!mEmbeddedStylesheetRoot);
+
+ mCompileResult = NS_OK;
+
if (!nsContentUtils::SubjectPrincipalOrSystemIfNativeCaller()->Subsumes(
aStyle.NodePrincipal())) {
aRv.Throw(NS_ERROR_DOM_SECURITY_ERR);
Loading diff…
References
On This Page