Medium firefox Logic Error 🔧 Commit mapped

Overview

Medium
Severity
CVSS
No
Exploited ITW
Fixed
Fix Status
Impactmoderate
DescriptionIncorrect boundary conditions in the JavaScript: GC component
ComponentSpiderMonkey
Bug ClassLogic Error
Tracker1979502
Fix commitf9bc61fed779 (firefox) +1/-1
CISA KEVNot listed
CreditedGary Kwong
Disclosed2025-09-16

Changed Functions

FunctionChangeNotes
if
js/src/gc/Statistics.cpp
modified

Files Changed

  • js/src/gc/Statistics.cpp
diff --git a/js/src/gc/Statistics.cpp b/js/src/gc/Statistics.cpp
index 88c0d509137..8f34478c1ce 100644
--- a/js/src/gc/Statistics.cpp
+++ b/js/src/gc/Statistics.cpp
@@ -1562,7 +1562,7 @@ void Statistics::recordParallelPhase(PhaseKind phaseKind,
                                      TimeDuration duration) {
   MOZ_ASSERT(CurrentThreadCanAccessRuntime(gc->rt));
 
-  if (aborted) {
+  if (slices_.empty()) {
     return;
   }
 
Loading diff…