Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: cherry-pick 70579363ce7b from chromium #25026

Merged
merged 2 commits into from
Aug 21, 2020

Conversation

nornagon
Copy link
Member

@nornagon nornagon commented Aug 18, 2020

usb: Prevent iterator invalidation during Promise resolution

This change swaps sets of ScriptPromiseResolvers into local variables in
a number of places where it was possible for script to execute during
the call to Resolve() or Reject() and modify the set being iterated
over, thus invalidating the iterator.

(cherry picked from commit dbc6c3c3652680e287c60b3c6551622748543439)

Bug: 1106773
Change-Id: Id4eb0cd444a7dbb5de23038ec80f44fee649cfe4
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2304538
Auto-Submit: Reilly Grant reillyg@chromium.org
Commit-Queue: James Hollyer jameshollyer@chromium.org
Reviewed-by: James Hollyer jameshollyer@chromium.org
Cr-Original-Commit-Position: refs/heads/master@{#790217}
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2310964
Reviewed-by: Reilly Grant reillyg@chromium.org
Commit-Queue: Reilly Grant reillyg@chromium.org
Cr-Commit-Position: refs/branch-heads/4183@{#842}
Cr-Branched-From: 740e9e8a40505392ba5c8e022a8024b3d018ca65-refs/heads/master@{#782793}

Notes: Security: Backported fix for CVE-2020-6541.

@nornagon nornagon requested a review from a team as a code owner August 18, 2020 21:41
@nornagon nornagon added 7-3-x backport-check-skip Skip trop's backport validity checking labels Aug 18, 2020
@electron-cation electron-cation bot added the new-pr 🌱 PR opened in the last 24 hours label Aug 18, 2020
@electron-cation electron-cation bot removed the new-pr 🌱 PR opened in the last 24 hours label Aug 19, 2020
@StevenEBarbaro StevenEBarbaro self-requested a review August 21, 2020 20:39
@nornagon nornagon merged commit 7345b90 into 7-3-x Aug 21, 2020
@release-clerk
Copy link

release-clerk bot commented Aug 21, 2020

Release Notes Persisted

Security: Backported fix for CVE-2020-6541.

@nornagon nornagon deleted the cherry-pick/7-3-x/chromium/70579363ce7b branch August 21, 2020 22:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
7-3-x backport-check-skip Skip trop's backport validity checking
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants