[Webkit-unassigned] [Bug 210736] StringImpl::adopt truncates the string by copying only half of the argument Vector

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Apr 20 09:33:54 PDT 2020


https://bugs.webkit.org/show_bug.cgi?id=210736

--- Comment #2 from Darin Adler <darin at apple.com> ---
(In reply to Fujii Hironori from comment #0)
> StringImpl::adopt truncates the string by copying only half of the argument
> Vector
> 
> r253987 (Bug 186422) added the following line:
> 
> > memcpy(stringImplBuffer.get(), vectorBuffer.get(), size);
> 
> But it should be the following for UChar string.
> 
> > memcpy(stringImplBuffer.get(), vectorBuffer.get(), size * sizeof(CharacterType));

StringImpl::copyCharacters(stringImplBuffer.get(), vectorBuffer.get(), size);

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200420/8492d164/attachment.htm>


More information about the webkit-unassigned mailing list