Low firefox Logic Error 🔧 Commit mapped

Overview

Low
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Impactlow
DescriptionIncorrect boundary conditions in the Security: Process Sandboxing component
ComponentSecurity/NSS
Bug ClassLogic Error
Tracker2041758
Fix commit64ad87568a19 (firefox) +3/-5
CISA KEVNot listed
CreditedMozilla
Disclosed2026-09-15

Changed Functions

FunctionChangeNotes
if
security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
modified

Files Changed

  • security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
diff --git a/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp b/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
index 4b0f9097b21..bb700fadc3f 100644
--- a/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
+++ b/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
@@ -543,13 +543,11 @@ void SandboxBrokerPolicyFactory::InitContentPolicy() {
 
   nsAutoCString xdgConfigDirs(PR_GetEnv("XDG_CONFIG_DIRS"));
   for (const auto& path : xdgConfigDirs.Split(':')) {
-    if (path[0] != '/') {
+    if (path.IsEmpty() || path[0] != '/') {
       continue;
     }
 
-    if (!path.IsEmpty()) {  // AddPath will fail on empty strings
-      policy->AddFutureDir(rdonly, PromiseFlatCString(path).get());
-    }
+    policy->AddFutureDir(rdonly, PromiseFlatCString(path).get());
   }
 
   // Allow fonts subdir in XDG_DATA_HOME
@@ -563,7 +561,7 @@ void SandboxBrokerPolicyFactory::InitContentPolicy() {
   // Any font subdirs in XDG_DATA_DIRS
   nsAutoCString xdgDataDirs(PR_GetEnv("XDG_DATA_DIRS"));
   for (const auto& path : xdgDataDirs.Split(':')) {
-    if (path[0] != '/') {
+    if (path.IsEmpty() || path[0] != '/') {
       continue;
     }
 
Loading diff…