[Webkit-unassigned] [Bug 224840] Crash due to VectorBuffer pre-allocation failure

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=224840

--- Comment #10 from Darin Adler <darin at apple.com> ---
(In reply to Sam Weinig from comment #4)
> I think there might be a similar issue in:
> 
> ArgumentCoder<WebCore::CDMInstanceSession::KeyStatusVector>::decode(...)
> 
> which does a `keyStatuses.reserveInitialCapacity(dataSize);` from a decoded
> size.

Yes, that must be removed.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210421/0717067a/attachment.htm>