[webkit-reviews] review denied: [Bug 47382] Blob / BlobBuilder can be put into bad state with wild integers and strings, due to integer overflows : [Attachment 70322] Patch

[bugzilla-daemon at webkit.org]

Jian Li <jianli at chromium.org> has denied Chris Evans <cevans at google.com>'s
request for review:
Bug 47382: Blob / BlobBuilder can be put into bad state with wild integers and
strings, due to integer overflows
https://bugs.webkit.org/show_bug.cgi?id=47382

Attachment 70322: Patch
https://bugs.webkit.org/attachment.cgi?id=70322&action=review

------- Additional Comments from Jian Li <jianli at chromium.org>
This is the only problem.

View in context: https://bugs.webkit.org/attachment.cgi?id=70322&action=review

> LayoutTests/fast/files/blob-slice-overflow.html:13
> +for (i = 0; i < 2000; ++i) text += 'A';

What I mean is:
  for (var i = 0; ...)