[Webkit-unassigned] [Bug 171630] [JSC] Test stringimpl-to-jsstring-on-large-strings-2 uses a lot of RAM

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed May 3 16:56:52 PDT 2017


--- Comment #2 from Carlos Alberto Lopez Perez <clopez at igalia.com> ---
Ok.. further investigation it seems the chrome results are not valid.

The try{} on the test was hidding that chrome was simply aborting with such large string.

I have crafted a better test that will print either the time it takes to run or the exception:


And I get:

 - Chrome: Invalid string length
 - Firefox: repeat count must be less than infinity and not overflow maximum string size
 - WebKitGTK+: Test finished: total time to run: 1459.0900000000038 milliseconds

So, I think we should limit the string length like Chrome does....

What is the purpose of allowing such large string other than allow some malicious page to crash the user's computer?

You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170503/233ea4d2/attachment.html>

More information about the webkit-unassigned mailing list