Bug 35070 - Addition of 2 strings of length 2^31 may result in a string of length 0.
: Addition of 2 strings of length 2^31 may result in a string of length 0.
Status: RESOLVED FIXED
: WebKit
JavaScriptCore
: 528+ (Nightly build)
: PC Mac OS X 10.5
: P2 Normal
Assigned To:
:
:
:
:
  Show dependency treegraph
 
Reported: 2010-02-17 19:40 PST by
Modified: 2010-02-17 21:08 PST (History)


Attachments
Patch, missing new results for layout test. (6.09 KB, patch)
2010-02-17 19:59 PST, Gavin Barraclough
oliver: review+
Review Patch | Details | Formatted Diff | Diff


Note

You need to log in before you can comment on or make changes to this bug.


Description From 2010-02-17 19:40:24 PST
(Should throw an exception).
------- Comment #1 From 2010-02-17 19:59:52 PST -------
Created an attachment (id=48962) [details]
Patch, missing new results for layout test.

Minor performance regression (necessary bug fix).
------- Comment #2 From 2010-02-17 20:07:19 PST -------
(From update of attachment 48962 [details])
r=me, i am somewhat concerned the testcase is going to take too long...
------- Comment #3 From 2010-02-17 21:08:11 PST -------
Landed in r54925 without test case; string-concatenate-outofmemory is currently disabled, will work separately at re-enabling this.