[Webkit-unassigned] [Bug 210736] New: StringImpl::adopt truncates the string by copying only half of the argument Vector

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=210736

            Bug ID: 210736
           Summary: StringImpl::adopt truncates the string by copying only
                    half of the argument Vector
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Web Template Framework
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: Hironori.Fujii at sony.com

StringImpl::adopt truncates the string by copying only half of the argument Vector

r253987 (Bug 186422) added the following line:

> memcpy(stringImplBuffer.get(), vectorBuffer.get(), size);

But it should be the following for UChar string.

> memcpy(stringImplBuffer.get(), vectorBuffer.get(), size * sizeof(CharacterType));

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200420/ece9285c/attachment.htm>