[Webkit-unassigned] [Bug 30827] Off-by-one hard-to-trigger memory corruption in CSSParser (seen only with GCC 4.4)

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Oct 27 12:43:33 PDT 2009


https://bugs.webkit.org/show_bug.cgi?id=30827


Chris Evans <scarybeasts at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |scarybeasts at gmail.com




--- Comment #7 from Chris Evans <scarybeasts at gmail.com>  2009-10-27 12:43:32 PDT ---
It may not be a GCC4.4 optimization issue, but an issue with the lex code
itself.

e.g. here's a crash report on Windows in ::lex()

http://crash/reportdetail?reportid=3b8c4b9de1f9b57a

It crashes hitting a page boundary - which is one possible symptom of an
off-by-one. It's not a strong signal, though.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list