98a8bbee26
https://www.thunderbird.net/en-US/thunderbird/115.2.0/releasenotes MFSA 2023-38 (bsc#1214606) * CVE-2023-4573 (bmo#1846687) Memory corruption in IPC CanvasTranslator * CVE-2023-4574 (bmo#1846688) Memory corruption in IPC ColorPickerShownCallback * CVE-2023-4575 (bmo#1846689) Memory corruption in IPC FilePickerShownCallback * CVE-2023-4576 (bmo#1846694) Integer Overflow in RecordedSourceSurfaceCreation * CVE-2023-4577 (bmo#1847397) Memory corruption in JIT UpdateRegExpStatics * CVE-2023-4051 (bmo#1821884) Full screen notification obscured by file open dialog * CVE-2023-4578 (bmo#1839007) Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception * CVE-2023-4053 (bmo#1839079) Full screen notification obscured by external program * CVE-2023-4580 (bmo#1843046) Push notifications saved to disk unencrypted * CVE-2023-4581 (bmo#1843758) XLL file extensions were downloadable without warnings * CVE-2023-4582 (bmo#1773874) Buffer Overflow in WebGL glGetProgramiv * CVE-2023-4583 (bmo#1842030) Browsing Context potentially not cleared when closing Private Window * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080, OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=714
27 lines
777 B
Diff
27 lines
777 B
Diff
# HG changeset patch
|
|
# User msirringhaus@suse.de
|
|
# Date 1558442998 -7200
|
|
# Tue May 21 14:49:58 2019 +0200
|
|
# Node ID 386083b58d8558141901d796ec6919a4aba7ad3a
|
|
# Parent 76b747f7d113bddbb8593184d81e1bfe5fd51af0
|
|
bsc#991344 - Rpi3: Firefox crashes after a few seconds of usage
|
|
bmo#1302554 - ARM/AARCH64: Firefox crashes on NULL nsIChannel** result pointer in nsIOService::NewChannelFromURIWithProxyFlagsInternal()
|
|
|
|
diff --git a/netwerk/base/nsIOService.cpp b/netwerk/base/nsIOService.cpp
|
|
--- a/netwerk/base/nsIOService.cpp
|
|
+++ b/netwerk/base/nsIOService.cpp
|
|
@@ -1159,7 +1159,13 @@ nsresult nsIOService::NewChannelFromURIW
|
|
}
|
|
}
|
|
|
|
+#if defined(__aarch64__)
|
|
+ if (result) {
|
|
+ channel.forget(result);
|
|
+ }
|
|
+#else
|
|
channel.forget(result);
|
|
+#endif
|
|
return NS_OK;
|
|
}
|
|
|