Bug 225918

Summary:

ReadOnlySharedRingBufferStorage::updateFrameBounds() should validate boundsBufferSize

Product:

WebKit

Reporter:

Chris Dumez <cdumez>

Component:

Media

Assignee:

Chris Dumez <cdumez>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

eric.carlson, ggaren, jer.noble, peng.liu6, webkit-bug-importer, youennf

Priority:

Keywords:

InRadar

Version:

WebKit Nightly Build

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
Patch	none
Patch	none

Description Chris Dumez 2021-05-18 08:21:37 PDT

ReadOnlySharedRingBufferStorage::updateFrameBounds() should validate boundsBufferSize.

Comment 1 Chris Dumez 2021-05-18 08:22:53 PDT

Created attachment 428941 [details]
Patch

Comment 2 Chris Dumez 2021-05-18 08:23:18 PDT

Created attachment 428942 [details]
Patch

Comment 3 EWS 2021-05-18 09:07:13 PDT

Committed r277655 (237861@main): <https://commits.webkit.org/237861@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 428942 [details].

Comment 4 Radar WebKit Bug Importer 2021-05-18 09:08:17 PDT

<rdar://problem/78157772>