[Webkit-unassigned] [Bug 163748] [JSC] crash via `new Function("}{")`

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Oct 20 12:37:34 PDT 2016


https://bugs.webkit.org/show_bug.cgi?id=163748

Caitlin Potter (:caitp) <caitp at igalia.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |keith_miller at apple.com,
                   |                            |mark.lam at apple.com,
                   |                            |mcatanzaro at igalia.com,
                   |                            |msaboff at apple.com,
                   |                            |sbarati at apple.com

--- Comment #1 from Caitlin Potter (:caitp) <caitp at igalia.com> ---
/CC some folks who might be interested in a fix for that (feel free to mark as a sec critical bug if needed --- I don't tend to consider assertion failures to be exploitable, so I felt there was no need).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20161020/934cc017/attachment.html>


More information about the webkit-unassigned mailing list