Bug 216328

Summary:

OutOfBoundsSaneChain operations should use their own heap locations

Product:

WebKit

Reporter:

Saam Barati <saam>

Component:

JavaScriptCore

Assignee:

Saam Barati <saam>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

benjamin, fpizlo, ggaren, gskachkov, guijemont, jsc32, keith_miller, mark.lam, msaboff, rmorisset, ross.kirsling, ticaiolima, tzagallo, webkit-bug-importer, ysuzuki

Priority:

Keywords:

InRadar

Version:

WebKit Nightly Build

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
patch	none

Saam Barati

Reported 2020-09-09 15:24:06 PDT

...

Attachments
patch (9.95 KB, patch) 2020-09-09 15:39 PDT, Saam Barati	no flags	Details Formatted Diff Diff
View All Add attachment proposed patch, testcase, etc.

Saam Barati

Comment 1 2020-09-09 15:24:44 PDT

<rdar://problem/68568039>

Saam Barati

Comment 2 2020-09-09 15:39:22 PDT

Created attachment 408376 [details] patch

Keith Miller

Comment 3 2020-09-09 15:45:05 PDT

Comment on attachment 408376 [details] patch r=me

EWS

Comment 4 2020-09-09 21:47:42 PDT

Committed r266813: <https://trac.webkit.org/changeset/266813> All reviewed patches have been landed. Closing bug and clearing flags on attachment 408376 [details].

Note You need to log in before you can comment on or make changes to this bug.