Firefox · Core
CVE-2026-100819
Logic Error in Core
Overview
Moderate
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Files Changed
xpcom/io/nsStorageStream.cpp
Patch
diff --git a/xpcom/io/nsStorageStream.cpp b/xpcom/io/nsStorageStream.cpp
index 7d465ffd503..273b34dfaa6 100644
--- a/xpcom/io/nsStorageStream.cpp
+++ b/xpcom/io/nsStorageStream.cpp
@@ -171,11 +171,10 @@ nsStorageStream::Write(const char* aBuffer, uint32_t aCount,
LOG(("nsStorageStream [%p] Write mWriteCursor=%p mSegmentEnd=%p aCount=%d\n",
this, mWriteCursor, mSegmentEnd, aCount));
+ aCount = std::min(aCount, mMaxLogicalLength - mLogicalLength);
uint32_t remaining = aCount;
const char* readCursor = aBuffer;
- remaining = std::min(remaining, mMaxLogicalLength - mLogicalLength);
-
auto onExit = mozilla::MakeScopeExit([&] {
mMutex.AssertCurrentThreadOwns();
*aNumWritten = aCount - remaining;
Loading diff…
References
On This Page