Bug 211823

Summary: Exception check for OOM is a bit too late in JSBigInt::exponentiate.
Product: WebKit Reporter: Robin Morisset <rmorisset>
Component: JavaScriptCoreAssignee: Robin Morisset <rmorisset>
Status: RESOLVED FIXED    
Severity: Normal CC: ews-watchlist, keith_miller, mark.lam, msaboff, saam, tzagallo, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch none

Robin Morisset
Reported 2020-05-12 18:48:30 PDT
10n**1000000n crashes instead of throwing an exception. The cause is simple: we try to look at the result one line before verifying that the operation succeeded. rdar://problem/63084376
Attachments
Patch (3.59 KB, patch)
2020-05-12 18:52 PDT, Robin Morisset 		no flags
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Robin Morisset
Comment 1 2020-05-12 18:52:27 PDT
Created attachment 399222 [details] Patch
Mark Lam
Comment 2 2020-05-12 18:55:57 PDT
Comment on attachment 399222 [details] Patch r=me
EWS
Comment 3 2020-05-12 20:09:54 PDT
Committed r261596: <https://trac.webkit.org/changeset/261596> All reviewed patches have been landed. Closing bug and clearing flags on attachment 399222 [details].
Radar WebKit Bug Importer
Comment 4 2020-05-12 20:10:18 PDT
<rdar://problem/63166523>
Note You need to log in before you can comment on or make changes to this bug.