Bug 295578
| Summary: | Uint8Array.fromBase64 fails to reject invalid input | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Nikita Skovoroda <chalkerx> |
| Component: | JavaScriptCore | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED FIXED | ||
| Severity: | Normal | CC: | daniel, keith_miller, mark.lam, syg, webkit-bug-importer |
| Priority: | P2 | Keywords: | InRadar |
| Version: | WebKit Nightly Build | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
Nikita Skovoroda
E.g. 'A' (incomplete input), 'A==' (invalid input)
`Uint8Array.fromBase64` is shipped and this affects both macOS Safari 18.4 and nightly JSC builds (297100, from https://build.webkit.org/#/builders/1223)
https://tc39.es/proposal-arraybuffer-base64/spec/#sec-frombase64
* 10.3, step 10.b.i
* 10.3, step 10.e
See https://github.com/tc39/test262/pull/4533 for tests
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Radar WebKit Bug Importer
<rdar://problem/155346981>
Shu-yu Guo
Pull request: https://github.com/WebKit/WebKit/pull/47926
daniel
It looks like the bug is upstream, in simdutf, see https://github.com/simdutf/simdutf/pull/822
Will get fixed soon.
EWS
Committed 297335@main (c5b50b5798c5): <https://commits.webkit.org/297335@main>
Reviewed commits have been landed. Closing PR #47926 and removing active labels.