[Webkit-unassigned] [Bug 206572] KeyedDecoderGeneric crashes when it accesses a data with empty string key.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Jan 22 02:37:21 PST 2020


https://bugs.webkit.org/show_bug.cgi?id=206572

--- Comment #4 from Takashi Komori <Takashi.Komori at sony.com> ---
(In reply to Fujii Hironori from comment #3)
> How did you find this bug? Is this a real use case? empty string key.

This crash occurred and found when I tried to decode broken encoded data (zero filled from middle) by chance.
So I think it doesn't occur in normal scenarios.

To avoid decoding collapsed data, I tried to verify encoded data by using Decoder::verifyChecksum (PersistentDecoder.cpp)
But it didn't work because we can't verify before all decoding is done.
Persistence::Decoder calculates checksum while decoding data.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200122/d5e11cb1/attachment.htm>


More information about the webkit-unassigned mailing list