[Webkit-unassigned] [Bug 69148] Crash due to out of bounds read/write in MarkedSpace

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=69148





--- Comment #1 from Geoffrey Garen <ggaren at apple.com>  2011-09-30 12:15:37 PST ---
> I'm not clear on whether SizeClass.cellSize was meant to be an upper bound or lower bound.

Upper bound.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.