Bug 141259 - Optimized equal() functions in StringImpl.h may crash when shorter string is near the end of a page
Summary: Optimized equal() functions in StringImpl.h may crash when shorter string is ...
Status: NEW
Alias: None
Product: WebKit
Classification: Unclassified
Component: Web Template Framework (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Michael Saboff
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2015-02-04 13:00 PST by Alexey Proskuryakov
Modified: 2015-02-04 13:01 PST (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Alexey Proskuryakov 2015-02-04 13:00:54 PST 
equal() reads some garbage bytes from the shorter string when comparing. This is OK most of the time, but not when the string ends at a page boundary, and the next page is not readable.