Firefox · Graphics
CVE-2025-10527
UAF in Graphics
Overview
High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Changed Functions
| Function | Change | Notes |
|---|---|---|
ifgfx/2d/InlineTranslator.h |
modified |
Files Changed
gfx/2d/InlineTranslator.h
Patch
diff --git a/gfx/2d/InlineTranslator.h b/gfx/2d/InlineTranslator.h
index 334edb8404a..ff3af329293 100644
--- a/gfx/2d/InlineTranslator.h
+++ b/gfx/2d/InlineTranslator.h
@@ -92,7 +92,11 @@ class InlineTranslator : public Translator {
already_AddRefed<SourceSurface> LookupExternalSurface(uint64_t aKey) override;
void AddDrawTarget(ReferencePtr aRefPtr, DrawTarget* aDT) final {
- mDrawTargets.InsertOrUpdate(aRefPtr, RefPtr{aDT});
+ RefPtr<DrawTarget>& value = mDrawTargets.LookupOrInsert(aRefPtr);
+ if (mCurrentDT && mCurrentDT == value) {
+ mCurrentDT = nullptr;
+ }
+ value = aDT;
}
void AddPath(ReferencePtr aRefPtr, Path* aPath) final {
Loading diff…
References
On This Page