[Webkit-unassigned] [Bug 128437] New: [ASan] Use new/delete in PODFreeListArena

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Feb 7 20:29:00 PST 2014


https://bugs.webkit.org/show_bug.cgi?id=128437

           Summary: [ASan] Use new/delete in PODFreeListArena
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Tools / Tests
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: ddkilzer at webkit.org
                CC: ggaren at apple.com, oliver at apple.com, ayao at apple.com,
                    jpfau at apple.com, dfarler at apple.com


The PODFreeListArena class doesn't actually deallocate objects when they're freed, so address sanitizer builds of WebKit won't catch use-after-free issues with objects that use it.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list