[Webkit-unassigned] [Bug 36156] New: XHR 'progress' event code assumes wrongly that expectedLength >= 0

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=36156

           Summary: XHR 'progress' event code assumes wrongly that
                    expectedLength >= 0
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: jchaffraix at webkit.org


The code casts the expected content length from the network stack without
checking for negative length. This could cause some badness as some network
stacks (such as CoreFoundation) just return -1 when they do not know the
content length.

See https://bugs.webkit.org/show_bug.cgi?id=18654#c10 for the context of this
bug.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.