[Webkit-unassigned] [Bug 198320] [curl] Heap corruption in ~CurlResponse

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Jul 24 04:52:52 PDT 2019


https://bugs.webkit.org/show_bug.cgi?id=198320

--- Comment #3 from Takashi Komori <Takashi.Komori at sony.com> ---
WTF::StringImpl has reference counter but ref/deref operation is not thread safe.
In CurlRequest::start(), String object is used in thread unsafe way implicitly and causes crash.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190724/7f65840d/attachment.html>


More information about the webkit-unassigned mailing list