[Webkit-unassigned] [Bug 21939] Uninitialized ExceptionCode in DOMWindow::postMessage

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=21939


darin at apple.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|Uninitialized ExceptionCodes|Uninitialized ExceptionCode
                   |in MessagePort.             |in DOMWindow::postMessage




------- Comment #9 from darin at apple.com  2008-10-29 09:20 PDT -------
(In reply to comment #8)
> DOMWindow::postMessage uses ec internally with messagePort->clone().  If the
> caller of postMessage didn't initialize it, postMessage will have undefined
> behavior.  (clone won't touch ec unless there is an exception, so when we come
> out of clone() postMessage will be using an uninitialized ec).
> 
> There are two possible fixes; either we modify postMessage to use a different
> ExceptionCode for calling into clone() or we initialize ec within postMessage
> as per the patch here.
> 
> Does this sound right?

Yes. Retitled bug to reflect this problem.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.