Please take care when using the MOZ_CRASH_UNSAFE_* macros. Because of the
risk involved and because this constitutes data collection, I would like
Firefox data stewards to review any new usages of the MOZ_CRASH_UNSAFE_*
macros.

Unlike MOZ_CRASH, which only annotates crashes with compile-time constants
which are inherently not risky, both MOZ_CRASH_UNSAFE_OOL and
MOZ_CRASH_UNSAFE_PRINTF can annotate crashes with arbitrary data. Crash
reasons are publicly visible in crash reports, and in general it is not
appropriate to send any kind of user data as part of the crash reason.

If you are interested in collecting diagnostic data which is not
appropriate for public data collection, it is possible to use crash
annotations to store this information more securely.

--BDS
_______________________________________________
dev-platform mailing list
dev-platform@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-platform

Reply via email to