Bug 144668 - Introduce a SaneChainOutOfBounds Array::Speculation that guarantees purity of out-of-bounds reads
Summary: Introduce a SaneChainOutOfBounds Array::Speculation that guarantees purity of...
Status: NEW
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: All All
: P2 Normal
Assignee: Saam Barati
URL:
Keywords:
Depends on: 144664
Blocks:
  Show dependency tree / graph
 
Reported: 2015-05-05 23:06 PDT by Filip Pizlo
Modified: 2018-02-18 14:46 PST (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Filip Pizlo 2015-05-05 23:06:39 PDT 
...