Moderate firefox Logic Error 🔧 Commit mapped

Overview

Moderate
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Impactmoderate
DescriptionSandbox escape due to incorrect boundary conditions in the Internationalization component
ComponentCore
Bug ClassLogic Error
Tracker2028871
Fix commitf6f61b9766a0 (firefox) +8/-0
CISA KEVNot listed
CreditedMozilla
Disclosed2026-09-29

Changed Functions

FunctionChangeNotes
if
intl/uconv/nsConverterInputStream.cpp
modified

Files Changed

  • intl/uconv/nsConverterInputStream.cpp
diff --git a/intl/uconv/nsConverterInputStream.cpp b/intl/uconv/nsConverterInputStream.cpp
index 365342af6d6..f871b50801e 100644
--- a/intl/uconv/nsConverterInputStream.cpp
+++ b/intl/uconv/nsConverterInputStream.cpp
@@ -19,6 +19,14 @@ NS_IMPL_ISUPPORTS(nsConverterInputStream, nsIConverterInputStream,
 NS_IMETHODIMP
 nsConverterInputStream::Init(nsIInputStream* aStream, const char* aCharset,
                              int32_t aBufferSize, char16_t aReplacementChar) {
+  mInput = nullptr;
+  mByteData.Clear();
+  mUnicharData.Clear();
+  mLastErrorCode = NS_OK;
+  mLeftOverBytes = 0;
+  mUnicharDataOffset = 0;
+  mUnicharDataLength = 0;
+
   nsAutoCString label;
   if (!aCharset) {
     label.AssignLiteral("UTF-8");
Loading diff…