[Webkit-unassigned] [Bug 82090] ArrayBufferView and its ArrayBuffer are appended to object pool in wrong order

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=82090





--- Comment #11 from Yong Li <yong.li.webkit at gmail.com>  2012-03-26 12:39:33 PST ---
to (In reply to comment #10)
> (In reply to comment #9)
> > Did this bug cause a crash or did it just fail to copy correctly?  I'm asking simply because it's important that the deserialiser never crash, even on bogus data
> 
> I believe it fails to copy correctly. My Qt build does crash (on ubuntu 32) though, when trying to report a JS error. I haven't looked deeper into that crash but I think it is another issue. When building with the patch, it doesn't crash any more and can dump the results.

Forgot to mention, it doesn't on QNX

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.