[Webkit-unassigned] [Bug 111380] Handle CRLF in MIME types of Blobs appended to multipart FormData

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Apr 8 10:38:01 PDT 2013


https://bugs.webkit.org/show_bug.cgi?id=111380





--- Comment #48 from Alexey Proskuryakov <ap at webkit.org>  2013-04-08 10:36:15 PST ---
The crash is actually here:

bool Blob::isValidContentType(const String& contentType)
{
    size_t length = contentType.length();
    if (contentType.is8Bit()) {

The is8bit function cannot be called on null strings. You should probably add an early return for this case.

> The crashes seem to be caused by the "return emptyString()". They don't appear if I replace that with "return contentType" or "return contentType.lower()".

That's surprising.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.


More information about the webkit-unassigned mailing list