<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>105571</bug_id>
          
          <creation_ts>2012-12-20 13:15:55 -0800</creation_ts>
          <short_desc>Harden pointers in FastMalloc&apos;s singly linked list implementation</short_desc>
          <delta_ts>2012-12-20 13:36:56 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>New Bugs</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Oliver Hunt">oliver</reporter>
          <assigned_to name="Oliver Hunt">oliver</assigned_to>
          <cc>benjamin</cc>
    
    <cc>ojan.autocc</cc>
    
    <cc>webkit.review.bot</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>795721</commentid>
    <comment_count>0</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2012-12-20 13:15:55 -0800</bug_when>
    <thetext>Harden pointers in FastMalloc&apos;s singly linked list implementation</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>795724</commentid>
    <comment_count>1</comment_count>
      <attachid>180397</attachid>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2012-12-20 13:19:05 -0800</bug_when>
    <thetext>Created attachment 180397
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>795728</commentid>
    <comment_count>2</comment_count>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2012-12-20 13:23:11 -0800</bug_when>
    <thetext>Attachment 180397 did not pass style-queue:

Failed to run &quot;[&apos;Tools/Scripts/check-webkit-style&apos;, &apos;--diff-files&apos;, u&apos;Source/WTF/ChangeLog&apos;, u&apos;Source/WTF/wtf/Fa...&quot; exit_code: 1
Source/WTF/wtf/FastMalloc.cpp:687:  Weird number of spaces at line-start.  Are you using a 4-space indent?  [whitespace/indent] [3]
Source/WTF/wtf/FastMalloc.cpp:691:  Weird number of spaces at line-start.  Are you using a 4-space indent?  [whitespace/indent] [3]
Total errors found: 2 in 2 files


If any of these errors are false positives, please file a bug against check-webkit-style.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>795740</commentid>
    <comment_count>3</comment_count>
      <attachid>180397</attachid>
    <who name="Gavin Barraclough">barraclough</who>
    <bug_when>2012-12-20 13:34:07 -0800</bug_when>
    <thetext>Comment on attachment 180397
Patch

r+, assuming you&apos;re performance tested this one something.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>795743</commentid>
    <comment_count>4</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2012-12-20 13:36:56 -0800</bug_when>
    <thetext>Committed r138293: &lt;http://trac.webkit.org/changeset/138293&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>180397</attachid>
            <date>2012-12-20 13:19:05 -0800</date>
            <delta_ts>2012-12-20 13:34:07 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-105571-20121220131621.patch</filename>
            <type>text/plain</type>
            <size>2992</size>
            <attacher name="Oliver Hunt">oliver</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTM4Mjg3CmRpZmYgLS1naXQgYS9Tb3VyY2UvV1RGL0NoYW5n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</data>
<flag name="review"
          id="197653"
          type_id="1"
          status="+"
          setter="barraclough"
    />
          </attachment>
      

    </bug>

</bugzilla>