Firefox · DOM
CVE-2026-2769
UAF in DOM
Overview
High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Files Changed
dom/indexedDB/ActorsParent.cpp
Patch
diff --git a/dom/indexedDB/ActorsParent.cpp b/dom/indexedDB/ActorsParent.cpp
index 15097c87224..77bdce7aa8a 100644
--- a/dom/indexedDB/ActorsParent.cpp
+++ b/dom/indexedDB/ActorsParent.cpp
@@ -1326,6 +1326,7 @@ class DatabaseConnection::UpdateRefcountFunction::FileInfoEntry final {
}
}
void DecBySavepointDelta() { mDelta -= mSavepointDelta; }
+ void ResetSavepointDelta() { mSavepointDelta = 0; }
SafeRefPtr<DatabaseFileInfo> ReleaseFileInfo() {
return std::move(mFileInfo);
}
@@ -7626,6 +7627,7 @@ void DatabaseConnection::UpdateRefcountFunction::RollbackSavepoint() {
for (const auto& entry : mSavepointEntriesIndex.Values()) {
entry->DecBySavepointDelta();
+ entry->ResetSavepointDelta();
}
mInSavepoint = false;
Loading diff…
References
On This Page