164843 2016-11-16 16:43:10 -0800 ExceptionFuzz needs to placate exception check verification before overwriting a thrown exception. 2016-11-16 17:34:40 -0800 1 1 1 Unclassified WebKit JavaScriptCore WebKit Local Build Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 mark.lam mark.lam commit-queue keith_miller msaboff saam oldest_to_newest 1252108 0 mark.lam 2016-11-16 16:43:10 -0800 Patch and details coming. 1252109 1 295000 mark.lam 2016-11-16 16:48:13 -0800 Created attachment 295000 proposed patch. 1252110 2 commit-queue 2016-11-16 16:49:47 -0800 Attachment 295000 did not pass style-queue: ERROR: Source/JavaScriptCore/ChangeLog:13: Please consider whether the use of security-sensitive phrasing could help someone exploit WebKit: fuzzing, fuzz test [changelog/unwantedsecurityterms] [3] Total errors found: 1 in 2 files If any of these errors are false positives, please file a bug against check-webkit-style. 1252111 3 295000 keith_miller 2016-11-16 16:53:37 -0800 Comment on attachment 295000 proposed patch. r=me. 1252132 4 295000 commit-queue 2016-11-16 17:34:37 -0800 Comment on attachment 295000 proposed patch. Clearing flags on attachment: 295000 Committed r208834: <http://trac.webkit.org/changeset/208834> 1252133 5 commit-queue 2016-11-16 17:34:40 -0800 All reviewed patches have been landed. Closing bug. 295000 2016-11-16 16:48:13 -0800 2016-11-16 17:34:37 -0800 proposed patch. bug-164843.patch text/plain 2529 mark.lam SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291 cmNlL0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkocmV2aXNpb24gMjA4ODI4KQorKysgU291cmNl L0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDIxIEBA CisyMDE2LTExLTE2ICBNYXJrIExhbSAgPG1hcmsubGFtQGFwcGxlLmNvbT4KKworICAgICAgICBF eGNlcHRpb25GdXp6IG5lZWRzIHRvIHBsYWNhdGUgZXhjZXB0aW9uIGNoZWNrIHZlcmlmaWNhdGlv biBiZWZvcmUgb3ZlcndyaXRpbmcgYSB0aHJvd24gZXhjZXB0aW9uLgorICAgICAgICBodHRwczov L2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTY0ODQzCisKKyAgICAgICAgUmV2aWV3 ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgVGhlIFRocm93U2NvcGUgd2lsbCBjaGVj ayBmb3IgdW5jaGVja2VkIHNpbXVsYXRlZCBleGNlcHRpb25zIGJlZm9yZSB0aHJvd2luZyBhCisg ICAgICAgIG5ldyBleGNlcHRpb24uICBUaGlzIGVuc3VyZXMgdGhhdCB3ZSBkb24ndCBxdWlldGx5 IG92ZXJ3cml0ZSBhIHBlbmRpbmcgZXhjZXB0aW9uCisgICAgICAgICh3aGljaCBzaG91bGQgbmV2 ZXIgaGFwcGVuLCB3aXRoIHRoZSBvbmx5IGV4Y2VwdGlvbiBiZWluZyB0byByZXRocm93IHRoZSBz YW1lCisgICAgICAgIGV4Y2VwdGlvbikuICBIb3dldmVyLCBFeGNlcHRpb25GdXp6IHdvcmtzIGJ5 IGludGVudGlvbmFsbHkgdGhyb3dpbmcgaXRzIG93bgorICAgICAgICBleGNlcHRpb24gZXZlbiB3 aGVuIG9uZSBtYXkgYWxyZWFkeSBleGlzdCB0aGVyZWJ5IHBvdGVudGlhbGx5IG92ZXJ3cml0aW5n IGFuCisgICAgICAgIGV4aXN0aW5nIGV4Y2VwdGlvbi4gIFRoaXMgaXMgb2sgZm9yIEV4Y2VwdGlv bkZ1enogdGVzdGluZywgYnV0IHdlIG5lZWQgdG8gcGxhY2F0ZQorICAgICAgICB0aGUgZXhjZXB0 aW9uIGNoZWNrIHZlcmlmaWVyIGJlZm9yZSBFeGNlcHRpb25GdXp6IHRocm93cyBpdHMgb3duIGV4 Y2VwdGlvbi4KKworICAgICAgICAqIHJ1bnRpbWUvRXhjZXB0aW9uRnV6ei5jcHA6CisgICAgICAg IChKU0M6OmRvRXhjZXB0aW9uRnV6emluZyk6CisKIDIwMTYtMTEtMTYgIFl1c3VrZSBTdXp1a2kg IDx1dGF0YW5lLnRlYUBnbWFpbC5jb20+CiAKICAgICAgICAgW0VTNl1bV2ViQ29yZV0gQ2hhbmdl IEVTNl9NT0RVTEVTIGNvbXBpbGUgdGltZSBmbGFnIHRvIHJ1bnRpbWUgZmxhZwpJbmRleDogU291 cmNlL0phdmFTY3JpcHRDb3JlL3J1bnRpbWUvRXhjZXB0aW9uRnV6ei5jcHAKPT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQot LS0gU291cmNlL0phdmFTY3JpcHRDb3JlL3J1bnRpbWUvRXhjZXB0aW9uRnV6ei5jcHAJKHJldmlz aW9uIDIwODgyNCkKKysrIFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9ydW50aW1lL0V4Y2VwdGlvbkZ1 enouY3BwCSh3b3JraW5nIGNvcHkpCkBAIC00OSw2ICs0OSwxNSBAQCB2b2lkIGRvRXhjZXB0aW9u RnV6emluZyhFeGVjU3RhdGUqIGV4ZWMsCiAgICAgaWYgKGZpcmVUYXJnZXQgPT0gc19udW1iZXJP ZkV4Y2VwdGlvbkZ1enpDaGVja3MpIHsKICAgICAgICAgcHJpbnRmKCJKU0MgRVhDRVBUSU9OIEZV Wlo6IFRocm93aW5nIGZ1enogZXhjZXB0aW9uIHdpdGggY2FsbCBmcmFtZSAlcCwgc2VlbiBpbiAl cyBhbmQgcmV0dXJuIGFkZHJlc3MgJXAuXG4iLCBleGVjLCB3aGVyZSwgcmV0dXJuUEMpOwogICAg ICAgICBmZmx1c2goc3Rkb3V0KTsKKworICAgICAgICAvLyBUaGUgVGhyb3dTY29wZSBhbHNvIGNo ZWNrcyBmb3IgdW5jaGVja2VkIHNpbXVsYXRlZCBleGNlcHRpb25zIGJlZm9yZSB0aHJvd2luZyBh CisgICAgICAgIC8vIG5ldyBleGNlcHRpb24uIFRoaXMgZW5zdXJlcyB0aGF0IHdlIGRvbid0IHF1 aWV0bHkgb3ZlcndyaXRlIGEgcGVuZGluZyBleGNlcHRpb24KKyAgICAgICAgLy8gKHdoaWNoIHNo b3VsZCBuZXZlciBoYXBwZW4gd2l0aCB0aGUgb25seSBleGNlcHRpb24gYmVpbmcgdG8gcmV0aHJv dyB0aGUgc2FtZQorICAgICAgICAvLyBleGNlcHRpb24pLiBIb3dldmVyLCBFeGNlcHRpb25GdXp6 IHdvcmtzIGJ5IGludGVudGlvbmFsbHkgdGhyb3dpbmcgaXRzIG93biBleGNlcHRpb24KKyAgICAg ICAgLy8gZXZlbiB3aGVuIG9uZSBtYXkgYWxyZWFkeSBleGlzdC4gVGhpcyBpcyBvayBmb3IgRXhj ZXB0aW9uRnV6eiB0ZXN0aW5nLCBidXQgd2UgbmVlZAorICAgICAgICAvLyB0byBwbGFjYXRlIHRo ZSBleGNlcHRpb24gY2hlY2sgdmVyaWZpZXIgaGVyZS4KKyAgICAgICAgQVNTRVJUKHNjb3BlLmV4 Y2VwdGlvbigpIHx8ICFzY29wZS5leGNlcHRpb24oKSk7CisKICAgICAgICAgdGhyb3dFeGNlcHRp b24oZXhlYywgc2NvcGUsIGNyZWF0ZUVycm9yKGV4ZWMsIEFTQ0lJTGl0ZXJhbCgiRXhjZXB0aW9u IEZ1enoiKSkpOwogICAgIH0KIH0K