Bug 138772

Summary:

REGRESSION: Crash due to integer overflow beneath ComplexGetStatus::computeFor

Product:

WebKit

Reporter:

Jim Oase <jimoase>

Component:

JavaScriptCore

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED DUPLICATE

Severity:

Normal

CC:

mark.lam

Priority:

Keywords:

InRadar

Version:

528+ (Nightly build)

Hardware:

Mac (Intel)

OS:

OS X 10.10

Attachments:

Description	Flags
Screen shot of problem results	none

Jim Oase

Reported 2014-11-15 18:55:06 PST

Created attachment 241670 [details] Screen shot of problem results Add this site to the growing list of sites that cause WebKit to have repeated problems http://www.bobistheoilguy.com/blog/ WebKit Version 8.0 (10600.1.25, r176154)

Attachments
Screen shot of problem results (93.25 KB, image/jpeg) 2014-11-15 18:55 PST, Jim Oase	no flags	Details
View All Add attachment proposed patch, testcase, etc.

Alexey Proskuryakov

Comment 1 2014-11-16 00:03:33 PST

rdar://problem/18967311

Mark Lam

Comment 2 2014-11-23 08:20:27 PST

Sorry for the reverse dup, but this issue has already been independently resolved in https://webkit.org/b/139000. *** This bug has been marked as a duplicate of bug 139000 ***

Mark Lam

Comment 3 2014-11-23 08:20:28 PST

Sorry for the reverse dup, but this issue has already been independently resolved in https://webkit.org/b/139000. *** This bug has been marked as a duplicate of bug 139000 ***

Note You need to log in before you can comment on or make changes to this bug.