[Webkit-unassigned] [Bug 39681] New: Web Inspector: Fixes chromium crasher due to passing an empty handle to toWebCoreString()

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue May 25 11:51:37 PDT 2010


https://bugs.webkit.org/show_bug.cgi?id=39681

           Summary: Web Inspector: Fixes chromium crasher due to passing
                    an empty handle to toWebCoreString()
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: Web Inspector
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: jaimeyap at google.com
                CC: pfeldman at chromium.org, yurys at chromium.org,
                    mnaganov at chromium.org, tonyg at chromium.org


toWebCoreString() in V8Binding.cpp in WebCore will null pointer deref if passed an empty handle.

Sometimes when invoking ScriptCallStack::callLocation(), we would get an empty handle for the script name.

See:
http://code.google.com/p/chromium/issues/detail?id=45004

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list