Firefox · DOM
CVE-2025-1013
Race in DOM
Overview
Low
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Changed Functions
| Function | Change | Notes |
|---|---|---|
ifdom/ipc/ContentParent.cpp |
modified |
Files Changed
dom/ipc/ContentParent.cpp
Patch
diff --git a/dom/ipc/ContentParent.cpp b/dom/ipc/ContentParent.cpp
index 59cb5b5b51a..817d5fdfdfa 100644
--- a/dom/ipc/ContentParent.cpp
+++ b/dom/ipc/ContentParent.cpp
@@ -5249,8 +5249,15 @@ mozilla::ipc::IPCResult ContentParent::CommonCreateWindow(
}
// If we haven't found a chrome window to open in, just use the most recently
- // opened one.
+ // opened non PBM window.
if (!outerWin) {
+ // The parent was a private window but it's no longer available.
+ if (aOriginAttributes.mPrivateBrowsingId !=
+ nsIScriptSecurityManager::DEFAULT_PRIVATE_BROWSING_ID) {
+ aResult = NS_ERROR_FAILURE;
+ return IPC_OK();
+ }
+
outerWin = nsContentUtils::GetMostRecentNonPBWindow();
if (NS_WARN_IF(!outerWin)) {
aResult = NS_ERROR_FAILURE;
Loading diff…
References
On This Page