Security/Reviews/Mobile/ExposeJNI

• • https://bugzilla.mozilla.org/show_bug.cgi?id=813985
• Expose some JNI to js through js-ctypes
  • https://bugzilla.mozilla.org/show_bug.cgi?id=787271
• Application shortcuts wrongly scaled? (DPI)
  • https://bugzilla.mozilla.org/show_bug.cgi?id=783921#c15

2 Total; 0 Open (0%); 2 Resolved (100%); 0 Verified (0%);

• Property "SecReview feature goal" (as page type) with input value "* allow the call of Java methods or objects via extensions
  • • can't do anything that fennec can't do" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process.
    • Property "SecReview alt solutions" (as page type) with input value "* could have implemented in pure JS
  • https://github.com/cscott/skeleton-addon-fxandroid/blob/jni/jni.jsm
    • does not use native parts" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process.
    • Property "SecReview threats considered" (as page type) with input value "* same subset as in desktop
    • addons have a great deal of power as they have the same rights as the browser" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process.
    • Property "SecReview threat brainstorming" (as page type) with input value "* Malicious addons using this API
  • What if an addon exposes some API to content. And content causes a buffer overflow (eg) in this API. Could that give content access to chrome via bugs in ctypes?" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process.

• • File a bug to create pref. for non AMO addons in Fennec
• SA-TBD: Has ctypes been reviewed? Fuzzed?

2 Total; 1 Open (50%); 1 Resolved (50%); 0 Verified (0%);