[Webkit-unassigned] [Bug 56224] New: Wrong size passed into WTF::StringHasher::createBlobHash() in BinaryPropertyList.cpp line 95.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=56224

           Summary: Wrong size passed into
                    WTF::StringHasher::createBlobHash() in
                    BinaryPropertyList.cpp line 95.
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh
        OS/Version: Mac OS X 10.5
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: yongjun_zhang at apple.com


See title, in Source/WebCore/platform/cf/BinaryPropertyList.cpp, line 95:

         WTF::StringHasher::createBlobHash(array.integers(), array.size());

which passes the size of integer array, i.e., how many integers the array has.  However,  StringHasher::createBlobHash(const void* data, unsigned size) (wtf/StringHasher.h:144) expects size to be the byte array's size.  For example, if the integer array has 1 integer, we would get an assertion failure in wtf/StringHasher.h:146:

         ASSERT(!(size % 2));

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.