78428 CVE-2012-0648 2012-02-11 17:38:35 -0800 DFG CFA assumes that a WeakJSConstant's structure is known 2012-02-27 16:44:54 -0800 1 1 1 Unclassified WebKit JavaScriptCore 528+ (Nightly build) All All RESOLVED FIXED InRadar P2 Normal --- 1 fpizlo webkit-unassigned ayao oldest_to_newest 554743 0 fpizlo 2012-02-11 17:38:35 -0800 Patch forthcoming. 554744 1 fpizlo 2012-02-11 17:38:45 -0800 <rdar://problem/10849492> 554745 2 126659 fpizlo 2012-02-11 17:43:08 -0800 Created attachment 126659 the patch 554755 3 fpizlo 2012-02-11 18:26:40 -0800 Landed in http://trac.webkit.org/changeset/107496 126659 2012-02-11 17:43:08 -0800 2012-02-11 17:44:26 -0800 the patch fixcfa_patch_1.diff text/plain 1701 fpizlo SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291 cmNlL0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkocmV2aXNpb24gMTA3NDk1KQorKysgU291cmNl L0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE0IEBA CisyMDEyLTAyLTExICBGaWxpcCBQaXpsbyAgPGZwaXpsb0BhcHBsZS5jb20+CisKKyAgICAgICAg REZHIENGQSBhc3N1bWVzIHRoYXQgYSBXZWFrSlNDb25zdGFudCdzIHN0cnVjdHVyZSBpcyBrbm93 bgorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9Nzg0MjgK KyAgICAgICAgPHJkYXI6Ly9wcm9ibGVtLzEwODQ5NDkyPiA8cmRhcjovL3Byb2JsZW0vMTA4NDk2 MjE+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgKiBk ZmcvREZHQWJzdHJhY3RTdGF0ZS5jcHA6CisgICAgICAgIChKU0M6OkRGRzo6QWJzdHJhY3RTdGF0 ZTo6ZXhlY3V0ZSk6CisKIDIwMTItMDItMTEgIE1hcmsgSGFobmVuYmVyZyAgPG1oYWhuZW5iZXJn QGFwcGxlLmNvbT4KIAogICAgICAgICBRdCBkZWJ1ZyBidWlsZCBmaXgKSW5kZXg6IFNvdXJjZS9K YXZhU2NyaXB0Q29yZS9kZmcvREZHQWJzdHJhY3RTdGF0ZS5jcHAKPT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291 cmNlL0phdmFTY3JpcHRDb3JlL2RmZy9ERkdBYnN0cmFjdFN0YXRlLmNwcAkocmV2aXNpb24gMTA3 NDkzKQorKysgU291cmNlL0phdmFTY3JpcHRDb3JlL2RmZy9ERkdBYnN0cmFjdFN0YXRlLmNwcAko d29ya2luZyBjb3B5KQpAQCAtMTk3LDkgKzE5NywxMiBAQCBib29sIEFic3RyYWN0U3RhdGU6OmV4 ZWN1dGUoTm9kZUluZGV4IG5vCiAgICAgY2FzZSBKU0NvbnN0YW50OgogICAgIGNhc2UgV2Vha0pT Q29uc3RhbnQ6IHsKICAgICAgICAgSlNWYWx1ZSB2YWx1ZSA9IG1fZ3JhcGgudmFsdWVPZkpTQ29u c3RhbnQobV9jb2RlQmxvY2ssIG5vZGVJbmRleCk7Ci0gICAgICAgIGlmICh2YWx1ZS5pc0NlbGwo KSkKLSAgICAgICAgICAgIG1faGF2ZVN0cnVjdHVyZXMgPSB0cnVlOwotICAgICAgICBmb3JOb2Rl KG5vZGVJbmRleCkuc2V0KHZhbHVlKTsKKyAgICAgICAgLy8gSGF2ZSB0byBiZSBjYXJlZnVsIGhl cmUhIEl0J3MgdGVtcHRpbmcgdG8gY2FsbCBzZXQodmFsdWUpLCBidXQKKyAgICAgICAgLy8gdGhh dCB3b3VsZCBiZSB3cm9uZywgc2luY2UgdGhhdCB3b3VsZCBjb25zdGl0dXRlIGEgcHJvb2YgdGhh dCB0aGlzCisgICAgICAgIC8vIHZhbHVlIHdpbGwgYWx3YXlzIGhhdmUgdGhlIHNhbWUgc3RydWN0 dXJlLiBUaGUgd2hvbGUgcG9pbnQgb2YgYSB2YWx1ZQorICAgICAgICAvLyBoYXZpbmcgYSBzdHJ1 Y3R1cmUgaXMgdGhhdCBpdCBtYXkgY2hhbmdlIGluIHRoZSBmdXR1cmUgLSBmb3IgZXhhbXBsZQor ICAgICAgICAvLyBiZXR3ZWVuIHdoZW4gd2UgY29tcGlsZSB0aGUgY29kZSBhbmQgd2hlbiB3ZSBy dW4gaXQuCisgICAgICAgIGZvck5vZGUobm9kZUluZGV4KS5zZXQocHJlZGljdGlvbkZyb21WYWx1 ZSh2YWx1ZSkpOwogICAgICAgICBicmVhazsKICAgICB9CiAgICAgICAgICAgICAK