Bug 310800
| Summary: | BitVector::mergeSlow reads out of bounds when `this` is larger than `other` | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Chris Dumez <cdumez> |
| Component: | Web Template Framework | Assignee: | Chris Dumez <cdumez> |
| Status: | RESOLVED FIXED | ||
| Severity: | Normal | CC: | webkit-bug-importer |
| Priority: | P2 | Keywords: | InRadar |
| Version: | WebKit Nightly Build | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
Chris Dumez
BitVector::mergeSlow reads out of bounds when `this` is larger than `other`.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Chris Dumez
Pull request: https://github.com/WebKit/WebKit/pull/61404
EWS
Committed 310027@main (3b3138e0af6c): <https://commits.webkit.org/310027@main>
Reviewed commits have been landed. Closing PR #61404 and removing active labels.
Radar WebKit Bug Importer
<rdar://problem/173445987>