24904 2014-03-03 23:45:09 +0000 Uint8Array parameters should not be modifiable after method calls return 2014-05-02 20:15:00 +0000 1 1 1 Unclassified HTML WG Encrypted Media Extensions unspecified All All RESOLVED FIXED P5 normal --- 1 ddorwin ddorwin acolwell hsivonen mike public-html-media silviapfeiffer1 watsonm public-html-bugzilla oldest_to_newest 101798 0 ddorwin 2014-03-03 23:45:09 +0000 MediaKeys.createSession() and MediaKeySession.update() both accept Uint8Arrays. Since these methods schedule a task, it's possible that JavaScript can modify the contents of those arrays before the task is run. For example: array[0]=0; mediaKeys.createSession("video/webm", array); array[0]=9; // Scheduled task will run later and see 9 in the first element. Similar issues have been reported in MSE, WebCrypto, and DataCue in the HTML spec (bug 24687). This was originally raised in http://lists.w3.org/Archives/Public/public-html-media/2014Feb/0019.html. The consensus in that thread seems to be: 1) We should have a consistent approach across specs. 2) The behavior should instead be effectively a copy (implemented using a copy-on-write optimization if desired). 102525 1 ddorwin 2014-03-17 23:51:13 +0000 Bug 24687 has been resolved by specifying that a copy should be made. 104989 2 ddorwin 2014-05-02 20:15:00 +0000 Added copy steps for all Uint8Array parameters in https://dvcs.w3.org/hg/html-media/rev/af33cfce6d49.