Firefox · Networking
CVE-2026-12301
Logic Error in Networking
Overview
Medium
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Changed Functions
| Function | Change | Notes |
|---|---|---|
ifnetwerk/protocol/http/HttpChannelParent.cpp |
modified |
Files Changed
netwerk/protocol/http/HttpChannelParent.cppnetwerk/protocol/http/HttpChannelParent.hnetwerk/protocol/http/PHttpChannel.ipdl
Patch
diff --git a/netwerk/protocol/http/HttpChannelParent.cpp b/netwerk/protocol/http/HttpChannelParent.cpp
index b1ed09f08fb..82a349e0e42 100644
--- a/netwerk/protocol/http/HttpChannelParent.cpp
+++ b/netwerk/protocol/http/HttpChannelParent.cpp
@@ -1064,25 +1064,6 @@ mozilla::ipc::IPCResult HttpChannelParent::RecvRemoveCorsPreflightCacheEntry(
return IPC_OK();
}
-mozilla::ipc::IPCResult HttpChannelParent::RecvSetCookies(
- const nsACString& aBaseDomain, const OriginAttributes& aOriginAttributes,
- nsIURI* aHost, const bool& aIsThirdParty,
- nsTArray<CookieStruct>&& aCookies) {
- net::PCookieServiceParent* csParent =
- LoneManagedOrNullAsserts(Manager()->ManagedPCookieServiceParent());
- NS_ENSURE_TRUE(csParent, IPC_OK());
-
- auto* cs = static_cast<net::CookieServiceParent*>(csParent);
-
- BrowsingContext* browsingContext = nullptr;
- if (mBrowserParent) {
- browsingContext = mBrowserParent->GetBrowsingContext();
- }
-
- return cs->SetCookies(nsCString(aBaseDomain), aOriginAttributes, aHost,
- aIsThirdParty, aCookies, browsingContext);
-}
-
//-----------------------------------------------------------------------------
// HttpChannelParent::nsIRequestObserver
//-----------------------------------------------------------------------------
diff --git a/netwerk/protocol/http/HttpChannelParent.h b/netwerk/protocol/http/HttpChannelParent.h
index 55aa41979c6..0870b5d29b1 100644
--- a/netwerk/protocol/http/HttpChannelParent.h
+++ b/netwerk/protocol/http/HttpChannelParent.h
@@ -195,10 +195,6 @@ class HttpChannelParent final : public nsIInterfaceRequestor,
virtual mozilla::ipc::IPCResult RecvRemoveCorsPreflightCacheEntry(
nsIURI* uri, const mozilla::ipc::PrincipalInfo& requestingPrincipal,
const OriginAttributes& originAttributes) override;
- virtual mozilla::ipc::IPCResult RecvSetCookies(
- const nsACString& aBaseDomain, const OriginAttributes& aOriginAttributes,
- nsIURI* aHost, const bool& aIsThirdParty,
- nsTArray<CookieStruct>&& aCookies) override;
virtual mozilla::ipc::IPCResult RecvBytesRead(const int32_t& aCount) override;
virtual mozilla::ipc::IPCResult RecvOpenOriginalCacheInputStream() override;
virtual void ActorDestroy(ActorDestroyReason why) override;
diff --git a/netwerk/protocol/http/PHttpChannel.ipdl b/netwerk/protocol/http/PHttpChannel.ipdl
index 35e928f14a1..e1965ef892d 100644
--- a/netwerk/protocol/http/PHttpChannel.ipdl
+++ b/netwerk/protocol/http/PHttpChannel.ipdl
@@ -59,15 +59,6 @@ parent:
PrincipalInfo requestingPrincipal,
OriginAttributes originAttributes);
- // Send cookies to the parent for a given channel. Compared to PCookieService
- // SetCookies this method allows the parent to determine which BrowsingContext
- // the request was sent for.
- async SetCookies(nsCString baseDomain,
- OriginAttributes attrs,
- nullable nsIURI host,
- bool isThirdParty,
- CookieStruct[] cookies);
-
// After receiving this message, the parent calls SendDeleteSelf, and makes
// sure not to send any more messages after that.
async DeletingChannel();
Loading diff…
References
On This Page