Bug 227003

Summary: Butterfly::create() does not handle allocation failures.
Product: WebKit Reporter: Michael Saboff <msaboff>
Component: JavaScriptCoreAssignee: Nobody <webkit-unassigned>
Status: NEW    
Severity: Normal CC: webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Michael Saboff
Reported 2021-06-14 18:46:06 PDT
Butterfly::create calls Butterfly:: tryCreate(), but always expects the allocation to succeed. inline Butterfly* Butterfly::create(VM& vm, JSObject* intendedOwner, size_t preCapacity, size_t propertyCapacity, bool hasIndexingHeader, const IndexingHeader& indexingHeader, size_t indexingPayloadSizeInBytes) { Butterfly* result = tryCreate(vm, intendedOwner, preCapacity, propertyCapacity, hasIndexingHeader, indexingHeader, indexingPayloadSizeInBytes); RELEASE_ASSERT(result); return result; }
Attachments
Radar WebKit Bug Importer
Comment 1 2021-06-21 18:48:17 PDT
Note You need to log in before you can comment on or make changes to this bug.