Brian Grinstead

speaker

356 appearances 1 recordings 1 series first heard Jun 2026 last heard 22 Jun

Brian Grinstead’s voice in public audio — every appearance, attributed to the second.

Trend

recordings per month · last 12 months

Recordings per month over the last 12 months — 1 in all, peaking in Jun 2026 with 1.

newest first · ▶ plays the moment

Yeah.

And I think the points you've made previously, like it's actually just great for the whole project to have that defined.

Right.

So originally it did not.

And so actually many of these were early finds and they don't.

But one of these is an interesting one to look at there, which is this NSZool content sync.

So this is a pretty complex bug where it found, we have an in-process sandbox technology called RLbox.

It's meant to help us

wrap kind of shrink wrap around third party dependencies so that if there's a vulnerability in that code, it can't leak out to Firefox.

And this was a really complicated find and it has tons of artifacts and it it sort of came up with it.

But the interesting thing is the fix itself is that the proposed fix is very simple.

It just said, oh, you were asserting this.

You should have been asserting that in terms of kind of input validation.

And so we did start to basically have this patching agent run on every fix.

And the cool part is you're in the loop.

So you can actually just apply the patch, build Firefox and confirm that that same test doesn't crash anymore.

And so that's great.

But if we go look at the bug,

These are basically, this is basically a dump of that bucket that we were just looking at all those files.

And if we sort of received it by the team, there's some discussion, and then we have sort of like, yep, this looks like a real issue.

Showing 181–200 of 356 · page 10 of 18