Bug 35070 - Addition of 2 strings of length 2^31 may result in a string of length 0.
: Addition of 2 strings of length 2^31 may result in a string of length 0.
Status: RESOLVED FIXED
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore
: 528+ (Nightly build)
: PC Mac OS X 10.5
: P2 Normal
Assigned To: Gavin Barraclough
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2010-02-17 19:40 PST by Gavin Barraclough
Modified: 2010-02-17 21:08 PST (History)
0 users

See Also:


Attachments
Patch, missing new results for layout test. (6.09 KB, patch)
2010-02-17 19:59 PST, Gavin Barraclough
oliver: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Gavin Barraclough 2010-02-17 19:40:24 PST
(Should throw an exception).
Comment 1 Gavin Barraclough 2010-02-17 19:59:52 PST
Created attachment 48962 [details]
Patch, missing new results for layout test.

Minor performance regression (necessary bug fix).
Comment 2 Oliver Hunt 2010-02-17 20:07:19 PST
Comment on attachment 48962 [details]
Patch, missing new results for layout test.

r=me, i am somewhat concerned the testcase is going to take too long...
Comment 3 Gavin Barraclough 2010-02-17 21:08:11 PST
Landed in r54925 without test case; string-concatenate-outofmemory is currently disabled, will work separately at re-enabling this.