[Webkit-unassigned] [Bug 163748] [JSC] crash via `new Function("}{")`
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Thu Oct 20 12:37:34 PDT 2016
https://bugs.webkit.org/show_bug.cgi?id=163748
Caitlin Potter (:caitp) <caitp at igalia.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |keith_miller at apple.com,
| |mark.lam at apple.com,
| |mcatanzaro at igalia.com,
| |msaboff at apple.com,
| |sbarati at apple.com
--- Comment #1 from Caitlin Potter (:caitp) <caitp at igalia.com> ---
/CC some folks who might be interested in a fix for that (feel free to mark as a sec critical bug if needed --- I don't tend to consider assertion failures to be exploitable, so I felt there was no need).
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20161020/934cc017/attachment.html>
More information about the webkit-unassigned
mailing list