Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Await safety uncertain in SwingSet/src/controller/initializeSwingset.js #6231

Closed
erights opened this issue Sep 16, 2022 · 2 comments · Fixed by #6236
Closed

Await safety uncertain in SwingSet/src/controller/initializeSwingset.js #6231

erights opened this issue Sep 16, 2022 · 2 comments · Fixed by #6236
Assignees
Labels
bug Something isn't working security

Comments

@erights
Copy link
Member

erights commented Sep 16, 2022

kernelBundles = await buildVatAndDeviceBundles(),

The triage at #6219 currently classifies this as

// TODO FIXME This code should be refactored to make this
// await checkably safe, or to remove it, or to record here
// why it is actually safe.
//
// As the default value of a destructuring, this `await` is bizarrely
// conditional. It'll happen if `kernelBundles` is either absent or
// undefined in `initializationOptions`, in which case we'll take a turn
// boundary here. Otherwise, we'll continue into the subsequent code
// synchronously. I could make this safe by introducing an extra turn
// boundary, but for this code I'm scared to do that without understanding
// the code better first.

Git blame shows @warner @FUDCo and @dckc as the ones who should probably investigate this, so I'm assigning to them. Feel free to reassign as appropriate of course.

@erights erights added bug Something isn't working security labels Sep 16, 2022
@dckc dckc removed their assignment Sep 16, 2022
@dckc
Copy link
Member

dckc commented Sep 16, 2022

I'm inclined to leave this to others. Let me know if you'd rather I stay involved.

@erights
Copy link
Member Author

erights commented Sep 16, 2022

If @warner or @FUDCo pick this up, that's certainly adequate. Feel free to remove yourself from the assignees.

FUDCo added a commit that referenced this issue Sep 16, 2022
turadg pushed a commit that referenced this issue Sep 16, 2022
@mergify mergify bot closed this as completed in #6236 Sep 17, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working security
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants