47648 2010-10-13 20:47:09 -0700 Memory smasher in WebKit2 InjectedBundleHitTestResult::absoluteLinkURL 2010-10-13 21:27:41 -0700 1 1 1 Unclassified WebKit WebKit2 528+ (Nightly build) PC OS X 10.5 RESOLVED FIXED P2 Normal --- 1 sam webkit-unassigned oldest_to_newest 293926 0 sam 2010-10-13 20:47:09 -0700 InjectedBundleHitTestResult::absoluteLinkURL returns a reference to a string that has been deallocated. 293929 1 70706 sam 2010-10-13 20:48:09 -0700 Created attachment 70706 Patch 293947 2 sam 2010-10-13 21:27:41 -0700 Landed in http://trac.webkit.org/changeset/69734. 70706 2010-10-13 20:48:09 -0700 2010-10-13 20:58:33 -0700 Patch smash.diff text/plain 2050 sam SW5kZXg6IFdlYktpdDIvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYktpdDIvQ2hhbmdlTG9n CShyZXZpc2lvbiA2OTczMikKKysrIFdlYktpdDIvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBA IC0xLDMgKzEsMTUgQEAKKzIwMTAtMTAtMTMgIFNhbSBXZWluaWcgIDxzYW1Ad2Via2l0Lm9yZz4K KworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBNZW1vcnkg c21hc2hlciBpbiBXZWJLaXQyIEluamVjdGVkQnVuZGxlSGl0VGVzdFJlc3VsdDo6YWJzb2x1dGVM aW5rVVJMCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD00 NzY0OAorCisgICAgICAgICogV2ViUHJvY2Vzcy9JbmplY3RlZEJ1bmRsZS9JbmplY3RlZEJ1bmRs ZUhpdFRlc3RSZXN1bHQuY3BwOgorICAgICAgICAoV2ViS2l0OjpJbmplY3RlZEJ1bmRsZUhpdFRl c3RSZXN1bHQ6OmFic29sdXRlTGlua1VSTCk6CisgICAgICAgICogV2ViUHJvY2Vzcy9JbmplY3Rl ZEJ1bmRsZS9JbmplY3RlZEJ1bmRsZUhpdFRlc3RSZXN1bHQuaDogUmV0dXJuIGEgU3RyaW5nIGlu c3RlYWQgb2YKKyAgICAgICAgYSBjb25zdCBTdHJpbmcmLgorCiAyMDEwLTEwLTEzICBBbmRlcnMg Q2FybHNzb24gIDxhbmRlcnNjYUBhcHBsZS5jb20+CiAKICAgICAgICAgUmV2aWV3ZWQgYnkgSm9o biBTdWxsaXZhbi4KSW5kZXg6IFdlYktpdDIvV2ViUHJvY2Vzcy9JbmplY3RlZEJ1bmRsZS9Jbmpl Y3RlZEJ1bmRsZUhpdFRlc3RSZXN1bHQuY3BwCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYktpdDIvV2ViUHJv Y2Vzcy9JbmplY3RlZEJ1bmRsZS9JbmplY3RlZEJ1bmRsZUhpdFRlc3RSZXN1bHQuY3BwCShyZXZp c2lvbiA2OTY2OCkKKysrIFdlYktpdDIvV2ViUHJvY2Vzcy9JbmplY3RlZEJ1bmRsZS9JbmplY3Rl ZEJ1bmRsZUhpdFRlc3RSZXN1bHQuY3BwCSh3b3JraW5nIGNvcHkpCkBAIC03NCw3ICs3NCw3IEBA IFdlYkZyYW1lKiBJbmplY3RlZEJ1bmRsZUhpdFRlc3RSZXN1bHQ6OnQKICAgICByZXR1cm4gc3Rh dGljX2Nhc3Q8V2ViRnJhbWVMb2FkZXJDbGllbnQqPihmcmFtZS0+bG9hZGVyKCktPmNsaWVudCgp KS0+d2ViRnJhbWUoKTsKIH0KIAotY29uc3QgU3RyaW5nJiBJbmplY3RlZEJ1bmRsZUhpdFRlc3RS ZXN1bHQ6OmFic29sdXRlTGlua1VSTCgpIGNvbnN0CitTdHJpbmcgSW5qZWN0ZWRCdW5kbGVIaXRU ZXN0UmVzdWx0OjphYnNvbHV0ZUxpbmtVUkwoKSBjb25zdAogewogICAgIHJldHVybiBtX2hpdFRl c3RSZXN1bHQuYWJzb2x1dGVMaW5rVVJMKCkuc3RyaW5nKCk7CiB9CkluZGV4OiBXZWJLaXQyL1dl YlByb2Nlc3MvSW5qZWN0ZWRCdW5kbGUvSW5qZWN0ZWRCdW5kbGVIaXRUZXN0UmVzdWx0LmgKPT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PQotLS0gV2ViS2l0Mi9XZWJQcm9jZXNzL0luamVjdGVkQnVuZGxlL0luamVjdGVkQnVu ZGxlSGl0VGVzdFJlc3VsdC5oCShyZXZpc2lvbiA2OTY2OCkKKysrIFdlYktpdDIvV2ViUHJvY2Vz cy9JbmplY3RlZEJ1bmRsZS9JbmplY3RlZEJ1bmRsZUhpdFRlc3RSZXN1bHQuaAkod29ya2luZyBj b3B5KQpAQCAtNDgsNyArNDgsNyBAQCBwdWJsaWM6CiAgICAgUGFzc1JlZlB0cjxJbmplY3RlZEJ1 bmRsZU5vZGVIYW5kbGU+IG5vZGVIYW5kbGUoKSBjb25zdDsgCiAgICAgV2ViRnJhbWUqIGZyYW1l KCkgY29uc3Q7CiAgICAgV2ViRnJhbWUqIHRhcmdldEZyYW1lKCkgY29uc3Q7Ci0gICAgY29uc3Qg U3RyaW5nJiBhYnNvbHV0ZUxpbmtVUkwoKSBjb25zdDsKKyAgICBTdHJpbmcgYWJzb2x1dGVMaW5r VVJMKCkgY29uc3Q7CiAKIHByaXZhdGU6CiAgICAgZXhwbGljaXQgSW5qZWN0ZWRCdW5kbGVIaXRU ZXN0UmVzdWx0KGNvbnN0IFdlYkNvcmU6OkhpdFRlc3RSZXN1bHQmIGhpdFRlc3RSZXN1bHQpCg==