[Webkit-unassigned] [Bug 108688] Add ASSERT_WITH_SECURITY_IMPLICATION to detect bad cast in DOM, CSS, etc.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Feb 4 09:23:54 PST 2013


https://bugs.webkit.org/show_bug.cgi?id=108688





--- Comment #5 from Abhishek Arya <inferno at chromium.org>  2013-02-04 09:25:57 PST ---
(In reply to comment #3)
> So remind me... these are ASSERTS which are on for builds sent through your fuzzers? but not generally for release buidls?

Yes, only for the fuzzing builds, they won't impact any production branches. http://trac.webkit.org/changeset/140633/trunk/Source/WTF/wtf/Assertions.h

(In reply to comment #4)
> Could you give some context (here, or on the security list) about how well this has worked/hasn't?

If you open https://bugs.webkit.org/show_bug.cgi?id=107699, you will see the list of bugs it is finding. (in blocks field - 107748 108150 108153 108307 108503 108522 108828 108829). This is just the beginning, since clusterfuzz has been down a lot last week because of migration work.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list