[Webkit-unassigned] [Bug 20340] SegmentedVector segment allocations can lead to unsafe use of temporary registers

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sun Aug 10 15:52:46 PDT 2008


https://bugs.webkit.org/show_bug.cgi?id=20340





------- Comment #6 from cwzwarich at uwaterloo.ca  2008-08-10 15:52 PDT -------
(In reply to comment #5)
> Is there a way to test this condition?

I was thinking about that myself. We could add some debugging machinery to
SegmentedVector and RegisterID to allow tagging RegisterIDs by the segment in
which they are allocated, just incrementing a counter each time. Other than
that, I don't think there is a way to consistently expose this flaw.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list