<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>141479</bug_id>
          
          <creation_ts>2015-02-11 10:37:11 -0800</creation_ts>
          <short_desc>[MSE] SampleMap::addRange() returns an inverted iterator_range, possibly causing a crash when that iterator_range is traversed.</short_desc>
          <delta_ts>2015-04-27 14:24:51 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>New Bugs</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Jer Noble">jer.noble</reporter>
          <assigned_to name="Jer Noble">jer.noble</assigned_to>
          <cc>cdumez</cc>
    
    <cc>commit-queue</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1068396</commentid>
    <comment_count>0</comment_count>
    <who name="Jer Noble">jer.noble</who>
    <bug_when>2015-02-11 10:37:11 -0800</bug_when>
    <thetext>[MSE] SampleMap::addRange() returns an inverted iterator_range, possibly causing a crash when that iterator_range is traversed.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1068398</commentid>
    <comment_count>1</comment_count>
      <attachid>246396</attachid>
    <who name="Jer Noble">jer.noble</who>
    <bug_when>2015-02-11 10:44:31 -0800</bug_when>
    <thetext>Created attachment 246396
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1068407</commentid>
    <comment_count>2</comment_count>
      <attachid>246396</attachid>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2015-02-11 11:21:59 -0800</bug_when>
    <thetext>Comment on attachment 246396
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=246396&amp;action=review

r=me!

&gt; Source/WebCore/ChangeLog:5
&gt; +

Should probably add the radar link too.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1068448</commentid>
    <comment_count>3</comment_count>
    <who name="Jer Noble">jer.noble</who>
    <bug_when>2015-02-11 12:53:22 -0800</bug_when>
    <thetext>&lt;rdar://problem/19067597&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1068449</commentid>
    <comment_count>4</comment_count>
      <attachid>246405</attachid>
    <who name="Jer Noble">jer.noble</who>
    <bug_when>2015-02-11 12:53:44 -0800</bug_when>
    <thetext>Created attachment 246405
Patch for landing</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1068469</commentid>
    <comment_count>5</comment_count>
      <attachid>246405</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2015-02-11 13:45:08 -0800</bug_when>
    <thetext>Comment on attachment 246405
Patch for landing

Clearing flags on attachment: 246405

Committed r179956: &lt;http://trac.webkit.org/changeset/179956&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>246396</attachid>
            <date>2015-02-11 10:44:31 -0800</date>
            <delta_ts>2015-02-11 11:21:59 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-141479-20150211104434.patch</filename>
            <type>text/plain</type>
            <size>2054</size>
            <attacher name="Jer Noble">jer.noble</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTc5NjM4CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>
<flag name="review"
          id="271338"
          type_id="1"
          status="+"
          setter="cdumez"
    />
          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>246405</attachid>
            <date>2015-02-11 12:53:44 -0800</date>
            <delta_ts>2015-02-11 13:45:08 -0800</delta_ts>
            <desc>Patch for landing</desc>
            <filename>bug-141479-20150211125343.patch</filename>
            <type>text/plain</type>
            <size>2084</size>
            <attacher name="Jer Noble">jer.noble</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTc5NjM4CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>

          </attachment>
      

    </bug>

</bugzilla>