162206 2016-09-19 11:52:27 -0700 URLParser can read memory out of bounds 2016-09-19 16:07:34 -0700 1 1 1 Unclassified WebKit New Bugs WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 achristensen achristensen oldest_to_newest 1231223 0 achristensen 2016-09-19 11:52:27 -0700 URLParser can read memory out of bounds 1231224 1 289245 achristensen 2016-09-19 11:55:22 -0700 Created attachment 289245 Patch 1231270 2 289245 ggaren 2016-09-19 13:18:53 -0700 Comment on attachment 289245 Patch r=me 1231383 3 achristensen 2016-09-19 16:07:34 -0700 http://trac.webkit.org/changeset/206126 289245 2016-09-19 11:55:22 -0700 2016-09-19 13:18:53 -0700 Patch bug-162206-20160919115248.patch text/plain 4690 achristensen SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDIwNjA3NikKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE4IEBACisyMDE2LTA5LTE5ICBBbGV4IENo cmlzdGVuc2VuICA8YWNocmlzdGVuc2VuQHdlYmtpdC5vcmc+CisKKyAgICAgICAgVVJMUGFyc2Vy IGNhbiByZWFkIG1lbW9yeSBvdXQgb2YgYm91bmRzCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJr aXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xNjIyMDYKKworICAgICAgICBSZXZpZXdlZCBieSBOT0JP RFkgKE9PUFMhKS4KKworICAgICAgICBDb3ZlcmVkIGJ5IG5ldyBBUEkgdGVzdHMuCisgICAgICAg IFVSTFBhcnNlciBpcyBkaXNhYmxlZCBieSBkZWZhdWx0IHN0aWxsLgorCisgICAgICAgICogcGxh dGZvcm0vVVJMUGFyc2VyLmNwcDoKKyAgICAgICAgKFdlYkNvcmU6OnBhcnNlSVB2NEhvc3QpOgor ICAgICAgICBJZiB0aGVyZSBhcmUgZmV3ZXIgdGhhbiB0d28gbnVtYmVycyBpbiBhbiBpcHY0IGFk ZHJlc3MsIHdlIHdvdWxkIHN1YnRyYWN0IHR3byBmcm9tIHRoZSBWZWN0b3IncyBzaXplLCAKKyAg ICAgICAgY2F1c2luZyB1cyB0byByZWFkIG1lbW9yeSB1cCB0byBzdGQ6Om51bWVyaWNfbGltaXRz PHNpemVfdD46Om1heCgpIC0gMi4gIEFkZGVkIGEgYm91bmRzIGNoZWNrIGFuZCBtYW55IHRlc3Rz LgorCiAyMDE2LTA5LTE4ICBBbGV4IENocmlzdGVuc2VuICA8YWNocmlzdGVuc2VuQHdlYmtpdC5v cmc+CiAKICAgICAgICAgUmVtb3ZlIHVubmVjZXNzYXJ5IFN0cmluZyBhbGxvY2F0aW9ucyBpbiBV UkxQYXJzZXIKSW5kZXg6IFNvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL1VSTFBhcnNlci5jcHAKPT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PQotLS0gU291cmNlL1dlYkNvcmUvcGxhdGZvcm0vVVJMUGFyc2VyLmNwcAkocmV2aXNp b24gMjA2MDc2KQorKysgU291cmNlL1dlYkNvcmUvcGxhdGZvcm0vVVJMUGFyc2VyLmNwcAkod29y a2luZyBjb3B5KQpAQCAtMTc0OCw5ICsxNzQ4LDExIEBAIGlubGluZSBzdGF0aWMgT3B0aW9uYWw8 dWludDMyX3Q+IHBhcnNlSVAKICAgICB9CiAgICAgaWYgKCFpdGVtcy5zaXplKCkgfHwgaXRlbXMu c2l6ZSgpID4gNCkKICAgICAgICAgcmV0dXJuIE51bGxvcHQ7Ci0gICAgZm9yIChzaXplX3QgaSA9 IDA7IGkgPCBpdGVtcy5zaXplKCkgLSAyOyBpKyspIHsKLSAgICAgICAgaWYgKGl0ZW1zW2ldID4g MjU1KQotICAgICAgICAgICAgcmV0dXJuIE51bGxvcHQ7CisgICAgaWYgKGl0ZW1zLnNpemUoKSA+ IDIpIHsKKyAgICAgICAgZm9yIChzaXplX3QgaSA9IDA7IGkgPCBpdGVtcy5zaXplKCkgLSAyOyBp KyspIHsKKyAgICAgICAgICAgIGlmIChpdGVtc1tpXSA+IDI1NSkKKyAgICAgICAgICAgICAgICBy ZXR1cm4gTnVsbG9wdDsKKyAgICAgICAgfQogICAgIH0KICAgICBpZiAoaXRlbXNbaXRlbXMuc2l6 ZSgpIC0gMV0gPj0gcG93MjU2KDUgLSBpdGVtcy5zaXplKCkpKQogICAgICAgICByZXR1cm4gTnVs bG9wdDsKSW5kZXg6IFRvb2xzL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBUb29scy9DaGFuZ2VM b2cJKHJldmlzaW9uIDIwNjEwNCkKKysrIFRvb2xzL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpA QCAtMSwzICsxLDEzIEBACisyMDE2LTA5LTE5ICBBbGV4IENocmlzdGVuc2VuICA8YWNocmlzdGVu c2VuQHdlYmtpdC5vcmc+CisKKyAgICAgICAgVVJMUGFyc2VyIGNhbiByZWFkIG1lbW9yeSBvdXQg b2YgYm91bmRzCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9p ZD0xNjIyMDYKKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAg ICAqIFRlc3RXZWJLaXRBUEkvVGVzdHMvV2ViQ29yZS9VUkxQYXJzZXIuY3BwOgorICAgICAgICAo VGVzdFdlYktpdEFQSTo6VEVTVF9GKToKKwogMjAxNi0wOS0xOSAgTmFuIFdhbmcgIDxuX3dhbmdA YXBwbGUuY29tPgogCiAgICAgICAgIEFYOiBBZGQgYWNjZXNzaWJpbGl0eSBzdXBwb3J0IGZvciBk ZXRhaWxzIGVsZW1lbnQgb24gaU9TCkluZGV4OiBUb29scy9UZXN0V2ViS2l0QVBJL1Rlc3RzL1dl YkNvcmUvVVJMUGFyc2VyLmNwcAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBUb29scy9UZXN0V2ViS2l0QVBJL1Rl c3RzL1dlYkNvcmUvVVJMUGFyc2VyLmNwcAkocmV2aXNpb24gMjA2MDc1KQorKysgVG9vbHMvVGVz dFdlYktpdEFQSS9UZXN0cy9XZWJDb3JlL1VSTFBhcnNlci5jcHAJKHdvcmtpbmcgY29weSkKQEAg LTIwNyw2ICsyMDcsOSBAQCBURVNUX0YoVVJMUGFyc2VyVGVzdCwgQmFzaWMpCiAgICAgY2hlY2tV UkwoIm5vdHNwZWNpYWw6L2EiLCB7Im5vdHNwZWNpYWwiLCAiIiwgIiIsICIiLCAwLCAiL2EiLCAi IiwgIiIsICJub3RzcGVjaWFsOi9hIn0pOwogICAgIGNoZWNrVVJMKCJub3RzcGVjaWFsOiIsIHsi bm90c3BlY2lhbCIsICIiLCAiIiwgIiIsIDAsICIiLCAiIiwgIiIsICJub3RzcGVjaWFsOiJ9KTsK ICAgICBjaGVja1VSTCgiaHR0cDovYSIsIHsiaHR0cCIsICIiLCAiIiwgImEiLCAwLCAiLyIsICIi LCAiIiwgImh0dHA6Ly9hLyJ9KTsKKyAgICBjaGVja1VSTCgiaHR0cDovLzI1Ni8iLCB7Imh0dHAi LCAiIiwgIiIsICIyNTYiLCAwLCAiLyIsICIiLCAiIiwgImh0dHA6Ly8yNTYvIn0pOworICAgIGNo ZWNrVVJMKCJodHRwOi8vMjU2Li8iLCB7Imh0dHAiLCAiIiwgIiIsICIyNTYuIiwgMCwgIi8iLCAi IiwgIiIsICJodHRwOi8vMjU2Li8ifSk7CisgICAgY2hlY2tVUkwoImh0dHA6Ly8xMjMuMjU2LyIs IHsiaHR0cCIsICIiLCAiIiwgIjEyMy4yNTYiLCAwLCAiLyIsICIiLCAiIiwgImh0dHA6Ly8xMjMu MjU2LyJ9KTsKICAgICAvLyBGSVhNRTogRml4IGFuZCBhZGQgYSB0ZXN0IHdpdGggYW4gaW52YWxp ZCBzdXJyb2dhdGUgcGFpciBhdCB0aGUgZW5kIHdpdGggYSBzcGFjZSBhcyB0aGUgc2Vjb25kIGNv ZGUgdW5pdC4KIAogICAgIC8vIFRoaXMgZGlzYWdyZWVzIHdpdGggdGhlIHdlYiBwbGF0Zm9ybSB0 ZXN0IGZvciBodHRwOi8vOkB3d3cuZXhhbXBsZS5jb20gYnV0IGFncmVlcyB3aXRoIENocm9tZSBh bmQgVVJMOjpwYXJzZSwKQEAgLTUwOCw2ICs1MTEsMjEgQEAgVEVTVF9GKFVSTFBhcnNlclRlc3Qs IFBhcnNlckRpZmZlcmVuY2VzKQogICAgIGNoZWNrUmVsYXRpdmVVUkxEaWZmZXJlbmNlcygiaHR0 cDovL2B7fTpge31AaC9ge30/YHt9IiwgImh0dHA6Ly9kb2Vzbm90bWF0dGVyLyIsCiAgICAgICAg IHsiaHR0cCIsICJge30iLCAiYHt9IiwgImgiLCAwLCAiLyU2MCU3QiU3RCIsICJge30iLCAiIiwg Imh0dHA6Ly8lNjAlN0IlN0Q6JTYwJTdCJTdEQGgvJTYwJTdCJTdEP2B7fSJ9LAogICAgICAgICB7 IiIsICIiLCAiIiwgIiIsIDAsICIiLCAiIiwgIiIsICJodHRwOi8vYHt9OmB7fUBoL2B7fT9ge30i fSk7CisgICAgY2hlY2tVUkxEaWZmZXJlbmNlcygiaHR0cDovL1swOmY6OmY6OmZdIiwKKyAgICAg ICAgeyIiLCAiIiwgIiIsICIiLCAwLCAiIiAsICIiLCAiIiwgImh0dHA6Ly9bMDpmOjpmOjpmXSJ9 LAorICAgICAgICB7Imh0dHAiLCAiIiwgIiIsICJbMDpmOjpmOjpmXSIsIDAsICIvIiAsICIiLCAi IiwgImh0dHA6Ly9bMDpmOjpmOjpmXS8ifSk7CisgICAgY2hlY2tVUkxEaWZmZXJlbmNlcygiaHR0 cDovLzEyMyIsCisgICAgICAgIHsiaHR0cCIsICIiLCAiIiwgIjAuMC4wLjEyMyIsIDAsICIvIiwg IiIsICIiLCAiaHR0cDovLzAuMC4wLjEyMy8ifSwKKyAgICAgICAgeyJodHRwIiwgIiIsICIiLCAi MTIzIiwgMCwgIi8iLCAiIiwgIiIsICJodHRwOi8vMTIzLyJ9KTsKKyAgICBjaGVja1VSTERpZmZl cmVuY2VzKCJodHRwOi8vMTIzLjIzNC8iLAorICAgICAgICB7Imh0dHAiLCAiIiwgIiIsICIxMjMu MC4wLjIzNCIsIDAsICIvIiwgIiIsICIiLCAiaHR0cDovLzEyMy4wLjAuMjM0LyJ9LAorICAgICAg ICB7Imh0dHAiLCAiIiwgIiIsICIxMjMuMjM0IiwgMCwgIi8iLCAiIiwgIiIsICJodHRwOi8vMTIz LjIzNC8ifSk7CisgICAgY2hlY2tVUkxEaWZmZXJlbmNlcygiaHR0cDovLzEyMy4yMzQuMDEyIiwK KyAgICAgICAgeyJodHRwIiwgIiIsICIiLCAiMTIzLjIzNC4wLjEwIiwgMCwgIi8iLCAiIiwgIiIs ICJodHRwOi8vMTIzLjIzNC4wLjEwLyJ9LAorICAgICAgICB7Imh0dHAiLCAiIiwgIiIsICIxMjMu MjM0LjAxMiIsIDAsICIvIiwgIiIsICIiLCAiaHR0cDovLzEyMy4yMzQuMDEyLyJ9KTsKKyAgICBj aGVja1VSTERpZmZlcmVuY2VzKCJodHRwOi8vMTIzLjIzNC4xMiIsCisgICAgICAgIHsiaHR0cCIs ICIiLCAiIiwgIjEyMy4yMzQuMC4xMiIsIDAsICIvIiwgIiIsICIiLCAiaHR0cDovLzEyMy4yMzQu MC4xMi8ifSwKKyAgICAgICAgeyJodHRwIiwgIiIsICIiLCAiMTIzLjIzNC4xMiIsIDAsICIvIiwg IiIsICIiLCAiaHR0cDovLzEyMy4yMzQuMTIvIn0pOwogfQogCiBURVNUX0YoVVJMUGFyc2VyVGVz dCwgRGVmYXVsdFBvcnQpCg==