[Webkit-unassigned] [Bug 147393] Parse the entire WebAssembly modules
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Fri Jul 31 16:10:25 PDT 2015
https://bugs.webkit.org/show_bug.cgi?id=147393
Sukolsak Sakshuwong <sukolsak at gmail.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #257974|Rewrote |Rewrote
description|WASMReader::readCompactUInt |WASMReader::readCompactUInt
|32() |32()
|- check that the number of |
|bytes does not exceed 5 |
|- check that the fifth byte |
|is less than 2^(32 - 7*4) = |
|2^4 to prevent integer |
|overflows |
|- check that the last byte |
|is not zero, unless the |
|number if zero |
--- Comment #12 from Sukolsak Sakshuwong <sukolsak at gmail.com> ---
Comment on attachment 257974
--> https://bugs.webkit.org/attachment.cgi?id=257974
Rewrote WASMReader::readCompactUInt32()
Rewrote WASMReader::readCompactUInt32()
- check that the number of bytes does not exceed 5
- check that the fifth byte is less than 2^(32 - 7*4) = 2^4 to prevent integer overflows
- check that the last byte is not zero, unless it's the only byte of the number
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150731/4e9d2df9/attachment-0001.html>
More information about the webkit-unassigned
mailing list