[Webkit-unassigned] [Bug 103317] New: HTML/XML parser helper unconsumeCharacters() can push back 8 bit text as 16 bit text

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=103317

           Summary: HTML/XML parser helper unconsumeCharacters() can push
                    back 8 bit text as 16 bit text
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: ASSIGNED
          Severity: Normal
          Priority: P2
         Component: HTML DOM
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: msaboff at apple.com


For greater than 2 character push back, unconsumeCharacters() in WebCore/xml/parser/CharacterReferenceParserInlines.h extracts text from the StringBuilder argument as a 16 bit string even if the StringBuilder contains 8 bit text.  Instead, the StringBuilder should be stringified and used directly.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.