Firefox · DOM
CVE-2026-92029
Logic Error in DOM
Overview
High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Changed Functions
| Function | Change | Notes |
|---|---|---|
ifdom/canvas/CanvasRenderingContext2D.cpp |
modified |
Files Changed
dom/canvas/CanvasRenderingContext2D.cpp
Patch
diff --git a/dom/canvas/CanvasRenderingContext2D.cpp b/dom/canvas/CanvasRenderingContext2D.cpp
index 44b78f54368..3eb5c61ffba 100644
--- a/dom/canvas/CanvasRenderingContext2D.cpp
+++ b/dom/canvas/CanvasRenderingContext2D.cpp
@@ -2980,6 +2980,9 @@ void CanvasRenderingContext2D::SetFilter(const nsACString& aFilter,
CurrentState().filterString = aFilter;
CurrentState().filterChain = std::move(filterChain);
if (mCanvasElement) {
+ if (CurrentState().autoSVGFiltersObserver) {
+ CurrentState().autoSVGFiltersObserver->Detach();
+ }
CurrentState().autoSVGFiltersObserver =
SVGObserverUtils::ObserveFiltersForCanvasContext(
this, mCanvasElement, CurrentState().filterChain.AsSpan());
Loading diff…
References
On This Page