Firefox · SpiderMonkey
CVE-2026-109716
Logic Error in SpiderMonkey
Overview
High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Files Changed
js/src/frontend/BytecodeCompiler.cpp
Patch
diff --git a/js/src/frontend/BytecodeCompiler.cpp b/js/src/frontend/BytecodeCompiler.cpp
index e9466fbfc2c..bc0f57f773e 100644
--- a/js/src/frontend/BytecodeCompiler.cpp
+++ b/js/src/frontend/BytecodeCompiler.cpp
@@ -1504,6 +1504,7 @@ static bool DelazifyCanonicalScriptedFunctionImpl(
.setSelfHostingMode(false)
.setEagerDelazificationStrategy(lazy->delazificationMode())
.setEagerBaselineStrategy(JS::EagerBaselineOption::None);
+ options.allowHTMLComments = !lazy->hasModuleGoal();
Rooted<CompilationInput> input(cx, CompilationInput(options));
input.get().initFromLazy(cx, lazy, ss);
@@ -1615,6 +1616,7 @@ static const CompilationStencil* DelazifyCanonicalScriptedFunctionImpl(
.setScriptSourceOffset(sourceStart)
.setNoScriptRval(false)
.setSelfHostingMode(false);
+ options.allowHTMLComments = !extra.hasModuleGoal();
// CompilationInput initialized with initFromStencil only reference
// information from the CompilationStencil context and the ref-counted
Loading diff…
References
On This Page