Bug 65211 - Buffer overflow creating error messages for JSON.parse
Summary: Buffer overflow creating error messages for JSON.parse
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: New Bugs (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Oliver Hunt
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2011-07-26 15:34 PDT by Oliver Hunt
Modified: 2011-07-27 11:18 PDT (History)
0 users

See Also:


Attachments
Patch (3.12 KB, patch)
2011-07-26 15:35 PDT, Oliver Hunt
darin: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Oliver Hunt 2011-07-26 15:34:17 PDT
Buffer overflow creating error messages for JSON.parse
Comment 1 Oliver Hunt 2011-07-26 15:35:26 PDT
Created attachment 102063 [details]
Patch
Comment 2 Oliver Hunt 2011-07-26 15:48:15 PDT
Committed r91795: <http://trac.webkit.org/changeset/91795>
Comment 3 Evan Martin 2011-07-26 15:48:32 PDT
Comment on attachment 102063 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=102063&action=review

> Source/JavaScriptCore/ChangeLog:8
> +        Parse string length to the UString constructor.

Probably meant "Pass", not "Parse", here.
Comment 4 Oliver Hunt 2011-07-27 11:18:04 PDT
<rdar://problem/9835936>
Comment 5 Oliver Hunt 2011-07-27 11:18:35 PDT
This isn't in security because it's a fix for a regression from a day or so ago.