Firefox · SpiderMonkey
CVE-2025-1012
UAF in SpiderMonkey
Overview
Medium
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Changed Functions
| Function | Change | Notes |
|---|---|---|
ifjs/src/vm/JSScript.cpp |
modified |
Files Changed
js/src/vm/JSScript.cpp
Patch
diff --git a/js/src/vm/JSScript.cpp b/js/src/vm/JSScript.cpp
index 84e1f6298ab..75551c72a92 100644
--- a/js/src/vm/JSScript.cpp
+++ b/js/src/vm/JSScript.cpp
@@ -1255,9 +1255,11 @@ ScriptSource::PinnedUnits<Unit>::PinnedUnits(
: PinnedUnitsBase(source) {
MOZ_ASSERT(source->hasSourceType<Unit>(), "must pin units of source's type");
+ addReader();
+
units_ = source->units<Unit>(cx, holder, begin, len);
- if (units_) {
- addReader();
+ if (!units_) {
+ removeReader<Unit>();
}
}
@@ -1270,9 +1272,11 @@ ScriptSource::PinnedUnitsIfUncompressed<Unit>::PinnedUnitsIfUncompressed(
: PinnedUnitsBase(source) {
MOZ_ASSERT(source->hasSourceType<Unit>(), "must pin units of source's type");
+ addReader();
+
units_ = source->uncompressedUnits<Unit>(begin, len);
- if (units_) {
- addReader();
+ if (!units_) {
+ removeReader<Unit>();
}
}
Loading diff…
References
On This Page