[Webkit-unassigned] [Bug 190947] Post too much text to iFrame could crash webkit

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Nov 6 13:12:09 PST 2018


https://bugs.webkit.org/show_bug.cgi?id=190947

--- Comment #4 from Chris Dumez <cdumez at apple.com> ---
Relevant code:
        RefPtr<FormData> httpBody = documentLoader->originalRequest().httpBody();
        if (httpBody && !httpBody->isEmpty()) {
            httpBodyAsString = httpBody->flattenToString();
            if (!httpBodyAsString.isEmpty()) {
                m_decodedHTTPBody = canonicalize(httpBodyAsString, TruncationStyle::None);
                if (m_decodedHTTPBody.find(isRequiredForInjection) == notFound)
                    m_decodedHTTPBody = String();
                if (m_decodedHTTPBody.length() >= minimumLengthForSuffixTree)
                    m_decodedHTTPBodySuffixTree = std::make_unique<SuffixTree<ASCIICodebook>>(m_decodedHTTPBody, suffixTreeDepth);
            }
        }

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20181106/c196b98b/attachment.html>


More information about the webkit-unassigned mailing list