Medium firefox Logic Error 🔧 Commit mapped

Overview

Medium
Severity
CVSS
No
Exploited ITW
Fixed
Fix Status
Impactmoderate
DescriptionMemory safety bug fixed in Firefox 152
ComponentNetworking
Bug ClassLogic Error
Tracker2040383
Fix commita032e8adc95b (firefox) +3/-1
CISA KEVNot listed
CreditedRintaro Kawasugi
Disclosed2026-06-16

Files Changed

  • modules/libpref/init/StaticPrefList.yaml
  • netwerk/test/unit/test_trr_additional_section.js
diff --git a/modules/libpref/init/StaticPrefList.yaml b/modules/libpref/init/StaticPrefList.yaml
index 4a7f1a68027..9fdee5c227f 100644
--- a/modules/libpref/init/StaticPrefList.yaml
+++ b/modules/libpref/init/StaticPrefList.yaml
@@ -16446,7 +16446,7 @@
 # Whether to add additional record IPs to the cache
 - name: network.trr.add_additional_records
   type: RelaxedAtomicBool
-  value: true
+  value: false
   mirror: always
 
 # When true, the HTTP cache uses the No-Vary-Search response header to match
diff --git a/netwerk/test/unit/test_trr_additional_section.js b/netwerk/test/unit/test_trr_additional_section.js
index bd8b300b968..445e213db21 100644
--- a/netwerk/test/unit/test_trr_additional_section.js
+++ b/netwerk/test/unit/test_trr_additional_section.js
@@ -5,6 +5,8 @@
 "use strict";
 
 trr_test_setup();
+Services.prefs.setBoolPref("network.trr.add_additional_records", true);
+
 registerCleanupFunction(async () => {
   trr_clear_prefs();
 });
Loading diff…

Regression Test / PoC

shipped with the fix
diff --git a/netwerk/test/unit/test_trr_additional_section.js b/netwerk/test/unit/test_trr_additional_section.js
index bd8b300b968..445e213db21 100644
--- a/netwerk/test/unit/test_trr_additional_section.js
+++ b/netwerk/test/unit/test_trr_additional_section.js
@@ -5,6 +5,8 @@
 "use strict";
 
 trr_test_setup();
+Services.prefs.setBoolPref("network.trr.add_additional_records", true);
+
 registerCleanupFunction(async () => {
   trr_clear_prefs();
 });
Loading diff…