On Wednesday, November 21, 2012 11:14:18 AM UTC-8, Bobby Holley wrote: > I've pondered having the JSAPI methods automatically enter compartments, > but that's kind of sketchy.
What's sketchy about it? I've thought about that before too, and it seemed like it would probably be OK, although APIs that take two compartment-owned values require something extra. > Moreover, if such checks were acceptable performance-wise, then I think > we should just make compartment checking run on release builds (so that > we could just MOZ_CRASH safely, meaning compartment mismatches would > no longer be security bugs). Does anyone have a sense if that's in the realm > of the possible? The main question is if Firefox ends up crashing all over the place to due to existing bugs or faulty addons. Someone would just have to try it out. Dave _______________________________________________ dev-tech-js-engine-internals mailing list dev-tech-js-engine-internals@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-js-engine-internals
