Bug 115559 - REGRESSION (r145042): Downloading a file sometimes results in could not create a sandbox extension Console message and file stays as a .download file
Summary: REGRESSION (r145042): Downloading a file sometimes results in could not creat...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebKit Misc. (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Alexey Proskuryakov
URL:
Keywords: InRadar, Regression
Depends on:
Blocks:
 
Reported: 2013-05-03 11:32 PDT by Alexey Proskuryakov
Modified: 2013-05-03 13:29 PDT (History)
1 user (show)

See Also:

Attachments
proposed fix (2.11 KB, patch)
2013-05-03 12:41 PDT, Alexey Proskuryakov 		sam: review+
Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Alexey Proskuryakov 2013-05-03 11:32:00 PDT 
This is a bug that existed before it was uncovered by r145042.

fileSystemRepresentation returns a CString that has a buffer that's longer than its length, and then resolveSymlinksInPath treats it as if buffer size was the length.

<rdar://problem/13785101>
Comment 1 Alexey Proskuryakov 2013-05-03 11:34:58 PDT 
This is much like bug 55412. I'd like to see if these CString issues can be fixed for good...
Comment 2 Alexey Proskuryakov 2013-05-03 12:41:33 PDT 
Created attachment 200463 [details]
proposed fix
Comment 3 Alexey Proskuryakov 2013-05-03 13:29:11 PDT 
Committed <http://trac.webkit.org/r149531>.