[Webkit-unassigned] [Bug 171630] [JSC] Test stringimpl-to-jsstring-on-large-strings-2 uses a lot of RAM

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=171630

--- Comment #2 from Carlos Alberto Lopez Perez <clopez at igalia.com> ---
Ok.. further investigation it seems the chrome results are not valid.

The try{} on the test was hidding that chrome was simply aborting with such large string.

I have crafted a better test that will print either the time it takes to run or the exception:

https://people.igalia.com/clopez/wkbug/largestrings/test-button.html

And I get:

 - Chrome: Invalid string length
 - Firefox: repeat count must be less than infinity and not overflow maximum string size
 - WebKitGTK+: Test finished: total time to run: 1459.0900000000038 milliseconds


So, I think we should limit the string length like Chrome does....

What is the purpose of allowing such large string other than allow some malicious page to crash the user's computer?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170503/233ea4d2/attachment.html>