Summary: | Callers of JSString::getIndex should check for OOM exceptions | ||||||||
---|---|---|---|---|---|---|---|---|---|
Product: | WebKit | Reporter: | Keith Miller <keith_miller> | ||||||
Component: | New Bugs | Assignee: | Keith Miller <keith_miller> | ||||||
Status: | RESOLVED FIXED | ||||||||
Severity: | Normal | CC: | commit-queue, ews-watchlist, mark.lam, msaboff, saam, webkit-bug-importer | ||||||
Priority: | P2 | Keywords: | InRadar | ||||||
Version: | WebKit Nightly Build | ||||||||
Hardware: | Unspecified | ||||||||
OS: | Unspecified | ||||||||
Attachments: |
|
Description
Keith Miller
2018-12-14 11:39:39 PST
Created attachment 357327 [details]
Patch
Comment on attachment 357327 [details]
Patch
r=me
Comment on attachment 357327 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=357327&action=review > JSTests/stress/StringObject-define-length-getter-rope-string-oom.js:3 > +let char16 = decodeURI('%E7%9A%84'); > +let rope = char16.padEnd(2147483644, 1); > +rope.__defineGetter__(256, function () {}); Whoops forgot to wrap this in a try catch. Will do that before landing. Created attachment 357330 [details]
Patch for landing
Comment on attachment 357330 [details] Patch for landing Clearing flags on attachment: 357330 Committed r239227: <https://trac.webkit.org/changeset/239227> All reviewed patches have been landed. Closing bug. |