Firefox · ImageLib
CVE-2025-14323
Logic Error in ImageLib
Overview
High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Files Changed
image/imgLoader.cpp
Patch
diff --git a/image/imgLoader.cpp b/image/imgLoader.cpp
index dba4d9f140d..41ece8f52d5 100644
--- a/image/imgLoader.cpp
+++ b/image/imgLoader.cpp
@@ -928,12 +928,14 @@ static nsresult NewImageChannel(
} else {
// either we are loading something inside a document, in which case
// we should always have a requestingNode, or we are loading something
- // outside a document, in which case the triggeringPrincipal and
- // triggeringPrincipal should always be the systemPrincipal.
- // However, there are exceptions: one is Notifications which create a
- // channel in the parent process in which case we can't get a
- // requestingNode.
- rv = NS_NewChannel(aResult, aURI, nsContentUtils::GetSystemPrincipal(),
+ // outside a document, in which case the triggeringPrincipal should be the
+ // systemPrincipal. However, there are exceptions: one is Notifications
+ // which create a channel in the parent process in which case we can't get a
+ // requestingNode though we might have a valid triggeringPrincipal.
+ rv = NS_NewChannel(aResult, aURI,
+ aTriggeringPrincipal
+ ? aTriggeringPrincipal
+ : nsContentUtils::GetSystemPrincipal(),
securityFlags, aPolicyType,
nullptr, // nsICookieJarSettings
nullptr, // PerformanceStorage
Loading diff…
References
On This Page