Firefox · Toolkit
CVE-2026-100803
Logic Error in Toolkit
Overview
Moderate
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Changed Functions
| Function | Change | Notes |
|---|---|---|
recvConduitOpenedtoolkit/components/extensions/ConduitsParent.sys.mjs |
modified |
Files Changed
toolkit/components/extensions/ConduitsParent.sys.mjs
Patch
diff --git a/toolkit/components/extensions/ConduitsParent.sys.mjs b/toolkit/components/extensions/ConduitsParent.sys.mjs
index 5ab6166c794..42f65507fd5 100644
--- a/toolkit/components/extensions/ConduitsParent.sys.mjs
+++ b/toolkit/components/extensions/ConduitsParent.sys.mjs
@@ -219,6 +219,11 @@ const Hub = {
* @param {ConduitsParent} actor
*/
recvConduitOpened(address, actor) {
+ if (this.remotes.has(address.id)) {
+ Cu.reportError(`Duplicate conduit id ${address.id}`);
+ return;
+ }
+
this.fillInAddress(address, actor);
for (let [key, conduit] of this.reportOnOpened.entries()) {
Loading diff…
References
On This Page