Bug 184772 - Use CheckedArithmetic for length computation in JSArray::unshiftCountWithAnyIndexingType
Summary: Use CheckedArithmetic for length computation in JSArray::unshiftCountWithAnyI...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Robin Morisset
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2018-04-19 06:12 PDT by Robin Morisset
Modified: 2018-05-01 09:04 PDT (History)
7 users (show)

See Also:


Attachments
Patch (2.97 KB, patch)
2018-04-19 06:20 PDT, Robin Morisset
no flags Details | Formatted Diff | Diff
Patch (4.18 KB, patch)
2018-04-19 06:45 PDT, Robin Morisset
no flags Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Robin Morisset 2018-04-19 06:12:38 PDT
<rdar://problem/39146327>
Comment 1 Robin Morisset 2018-04-19 06:20:13 PDT
Created attachment 338318 [details]
Patch
Comment 2 Robin Morisset 2018-04-19 06:45:26 PDT
Created attachment 338319 [details]
Patch
Comment 3 Robin Morisset 2018-04-19 06:47:32 PDT
The second patch uploaded was for a different bug, I marked it obsolete and un-obsoleted the first patch.
Comment 4 Robin Morisset 2018-05-01 07:19:50 PDT
ping review.
Comment 5 WebKit Commit Bot 2018-05-01 09:04:00 PDT
Comment on attachment 338318 [details]
Patch

Clearing flags on attachment: 338318

Committed r231198: <https://trac.webkit.org/changeset/231198>
Comment 6 WebKit Commit Bot 2018-05-01 09:04:01 PDT
All reviewed patches have been landed.  Closing bug.