| Summary: | machMessageSize uses sizeof(mach_msg_ool_ports_descriptor_t) for out-of-line *memory* | ||||||
|---|---|---|---|---|---|---|---|
| Product: | WebKit | Reporter: | Tim Horton <thorton> | ||||
| Component: | WebKit2 | Assignee: | Tim Horton <thorton> | ||||
| Status: | RESOLVED FIXED | ||||||
| Severity: | Normal | CC: | andersca, ap, sam | ||||
| Priority: | P2 | ||||||
| Version: | 528+ (Nightly build) | ||||||
| Hardware: | Unspecified | ||||||
| OS: | Unspecified | ||||||
| Attachments: |
|
||||||
Created attachment 217403 [details]
patch
|
machMessageSize does: if (numberOfOOLMemoryDescriptors) size += (numberOfOOLMemoryDescriptors * sizeof(mach_msg_ool_ports_descriptor_t)); but then uses descriptor->out_of_line, which is a mach_msg_ool_descriptor_t.