Firefox · Widget
CVE-2026-100797
Logic Error in Widget
Overview
Moderate
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Changed Functions
| Function | Change | Notes |
|---|---|---|
mBackbufferwidget/windows/RemoteBackbuffer.cpp |
modified | |
ifwidget/windows/RemoteBackbuffer.cpp |
modified |
Files Changed
widget/windows/RemoteBackbuffer.cpp
Patch
diff --git a/widget/windows/RemoteBackbuffer.cpp b/widget/windows/RemoteBackbuffer.cpp
index 6800dd13a2a..0044327a96b 100644
--- a/widget/windows/RemoteBackbuffer.cpp
+++ b/widget/windows/RemoteBackbuffer.cpp
@@ -320,14 +320,15 @@ Provider::Provider()
mBackbuffer() {}
Provider::~Provider() {
- mBackbuffer.reset();
-
+ // Stop and join the service thread before releasing any state.
if (mServiceThread) {
mStopServiceThread = true;
MOZ_ALWAYS_TRUE(::SetEvent(mRequestReadyEvent));
MOZ_ALWAYS_TRUE(PR_JoinThread(mServiceThread) == PR_SUCCESS);
}
+ mBackbuffer.reset();
+
if (mSharedDataPtr) {
MOZ_ALWAYS_TRUE(::UnmapViewOfFile(mSharedDataPtr));
}
Loading diff…
References
On This Page