Bug 78428 (CVE-2012-0648)

Summary:

DFG CFA assumes that a WeakJSConstant's structure is known

Product:

WebKit

Reporter:

Filip Pizlo <fpizlo>

Component:

JavaScriptCore

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

ayao

Priority:

Keywords:

InRadar

Version:

528+ (Nightly build)

Hardware:

All

OS:

All

Attachments:

Description	Flags
the patch	barraclough: review+

Description Filip Pizlo 2012-02-11 17:38:35 PST

Patch forthcoming.

Comment 1 Filip Pizlo 2012-02-11 17:38:45 PST

<rdar://problem/10849492>

Comment 2 Filip Pizlo 2012-02-11 17:43:08 PST

Created attachment 126659 [details]
the patch

Comment 3 Filip Pizlo 2012-02-11 18:26:40 PST

Landed in http://trac.webkit.org/changeset/107496