RESOLVED FIXED 256769
Handle overflow, underflow in XPath substring position, length 
https://bugs.webkit.org/show_bug.cgi?id=256769
Summary Handle overflow, underflow in XPath substring position, length
Ahmad Saleem
Reported 2023-05-14 05:14:25 PDT
Hi Team, Came across another potential merge. Blink Commit - https://chromium.googlesource.com/chromium/src.git/+/047653201597a4e5c3912d8c2c35adaa2ed6e6ec ^ Most stuff in XPathFunctions.cpp. It might be difficult for me to merge, appreciate if someone else can take it. Thanks!
Attachments
Add attachment proposed patch, testcase, etc.
Alexey Proskuryakov
Comment 1 2023-05-14 12:19:33 PDT
It's super weird that this came with a unit test instead of an HTML based one. Is there actually an observable difference?
Radar WebKit Bug Importer
Comment 2 2023-05-21 05:15:20 PDT
<rdar://problem/109624368>
zak ridouh
Comment 3 2025-03-03 14:48:00 PST
Pull request: https://github.com/WebKit/WebKit/pull/41805
EWS
Comment 4 2025-03-13 15:41:33 PDT
Committed 292121@main (138f2bcd7d8b): <https://commits.webkit.org/292121@main> Reviewed commits have been landed. Closing PR #41805 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.