[Webkit-unassigned] [Bug 82090] ArrayBufferView and its ArrayBuffer are appended to object pool in wrong order

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Mar 26 12:27:46 PDT 2012


https://bugs.webkit.org/show_bug.cgi?id=82090





--- Comment #10 from Yong Li <yong.li.webkit at gmail.com>  2012-03-26 12:27:46 PST ---
(In reply to comment #9)
> Did this bug cause a crash or did it just fail to copy correctly?  I'm asking simply because it's important that the deserialiser never crash, even on bogus data

I believe it fails to copy correctly. My Qt build does crash (on ubuntu 32) though, when trying to report a JS error. I haven't looked deeper into that crash but I think it is another issue. When building with the patch, it doesn't crash any more and can dump the results.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list