Firefox · Networking
CVE-2026-0877
Logic Error in Networking
Overview
High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Files Changed
ipc/glue/BackgroundUtils.cppnetwerk/base/LoadInfo.cppnetwerk/base/LoadInfo.hnetwerk/ipc/NeckoChannelParams.ipdlh
Patch
diff --git a/ipc/glue/BackgroundUtils.cpp b/ipc/glue/BackgroundUtils.cpp
index d2e5a4cf58c..3fd05a60ac7 100644
--- a/ipc/glue/BackgroundUtils.cpp
+++ b/ipc/glue/BackgroundUtils.cpp
@@ -611,7 +611,8 @@ nsresult LoadInfoToLoadInfoArgs(nsILoadInfo* aLoadInfo,
aLoadInfo->GetIsMetaRefresh(), aLoadInfo->GetLoadingEmbedderPolicy(),
aLoadInfo->GetIsOriginTrialCoepCredentiallessEnabledForTopLevel(),
unstrippedURI, interceptionInfoArg, aLoadInfo->GetIsNewWindowTarget(),
- aLoadInfo->GetUserNavigationInvolvement());
+ aLoadInfo->GetUserNavigationInvolvement(),
+ aLoadInfo->GetContainerFeaturePolicyInfo());
return NS_OK;
}
@@ -860,10 +861,11 @@ nsresult LoadInfoArgsToLoadInfo(const LoadInfoArgs& loadInfoArgs,
RefPtr<mozilla::net::LoadInfo> loadInfo = new mozilla::net::LoadInfo(
loadingPrincipal, triggeringPrincipal, principalToInherit,
topLevelPrincipal, resultPrincipalURI, cookieJarSettings,
- policyContainerToInherit, triggeringRemoteType,
- loadInfoArgs.sandboxedNullPrincipalID(), clientInfo, reservedClientInfo,
- initialClientInfo, controller, loadInfoArgs.securityFlags(),
- loadInfoArgs.sandboxFlags(), loadInfoArgs.contentPolicyType(),
+ policyContainerToInherit, loadInfoArgs.containerFeaturePolicyInfo(),
+ triggeringRemoteType, loadInfoArgs.sandboxedNullPrincipalID(), clientInfo,
+ reservedClientInfo, initialClientInfo, controller,
+ loadInfoArgs.securityFlags(), loadInfoArgs.sandboxFlags(),
+ loadInfoArgs.contentPolicyType(),
static_cast<LoadTainting>(loadInfoArgs.tainting()),
#define DEFINE_ARGUMENT(_t, _n, name, _d) loadInfoArgs.name(),
diff --git a/netwerk/base/LoadInfo.cpp b/netwerk/base/LoadInfo.cpp
index c80e36383b0..a963941c152 100644
--- a/netwerk/base/LoadInfo.cpp
+++ b/netwerk/base/LoadInfo.cpp
@@ -758,6 +758,7 @@ LoadInfo::LoadInfo(
nsIPrincipal* aPrincipalToInherit, nsIPrincipal* aTopLevelPrincipal,
nsIURI* aResultPrincipalURI, nsICookieJarSettings* aCookieJarSettings,
nsIPolicyContainer* aPolicyContainerToInherit,
+ const Maybe<dom::FeaturePolicyInfo>& aContainerFeaturePolicyInfo,
const nsACString& aTriggeringRemoteType,
const nsID& aSandboxedNullPrincipalID, const Maybe<ClientInfo>& aClientInfo,
const Maybe<ClientInfo>& aReservedClientInfo,
@@ -792,6 +793,7 @@ LoadInfo::LoadInfo(
mResultPrincipalURI(aResultPrincipalURI),
mCookieJarSettings(aCookieJarSettings),
mPolicyContainerToInherit(aPolicyContainerToInherit),
+ mContainerFeaturePolicyInfo(aContainerFeaturePolicyInfo),
mTriggeringRemoteType(aTriggeringRemoteType),
mSandboxedNullPrincipalID(aSandboxedNullPrincipalID),
mClientInfo(aClientInfo),
diff --git a/netwerk/base/LoadInfo.h b/netwerk/base/LoadInfo.h
index d9d5fa5e9e3..8739350587f 100644
--- a/netwerk/base/LoadInfo.h
+++ b/netwerk/base/LoadInfo.h
@@ -404,6 +404,7 @@ class LoadInfo final : public nsILoadInfo {
nsIURI* aResultPrincipalURI,
nsICookieJarSettings* aCookieJarSettings,
nsIPolicyContainer* aPolicyContainerToInherit,
+ const Maybe<dom::FeaturePolicyInfo>& aContainerFeaturePolicyInfo,
const nsACString& aTriggeringRemoteType,
const nsID& aSandboxedNullPrincipalID,
const Maybe<mozilla::dom::ClientInfo>& aClientInfo,
diff --git a/netwerk/ipc/NeckoChannelParams.ipdlh b/netwerk/ipc/NeckoChannelParams.ipdlh
index b2827185816..85a14be37c4 100644
--- a/netwerk/ipc/NeckoChannelParams.ipdlh
+++ b/netwerk/ipc/NeckoChannelParams.ipdlh
@@ -223,6 +223,7 @@ struct LoadInfoArgs
InterceptionInfoArg? interceptionInfo;
bool isNewWindowTarget;
UserNavigationInvolvement userNavigationInvolvement;
+ FeaturePolicyInfo? containerFeaturePolicyInfo;
};
/**
Loading diff…
References
On This Page