Changeset 68705 in webkit


Ignore:
Timestamp:
Sep 29, 2010, 4:05:50 PM (14 years ago)
Author:
andersca@apple.com
Message:

Add additional check to Text::wholeText.
<rdar://problem/8304795>

Reviewed by Darin Adler.

  • dom/Text.cpp:

(WebCore::Text::wholeText):

Location:
trunk/WebCore
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • trunk/WebCore/ChangeLog

    r68702 r68705  
     12010-09-29  Anders Carlsson  <andersca@apple.com>
     2
     3        Reviewed by Darin Adler.
     4
     5        Add additional check to Text::wholeText.
     6        <rdar://problem/8304795>
     7
     8        * dom/Text.cpp:
     9        (WebCore::Text::wholeText):
     10
    1112010-09-29  Brian Weinstein  <bweinstein@apple.com>
    212
  • trunk/WebCore/dom/Text.cpp

    r64383 r68705  
    124124        const Text* t = static_cast<const Text*>(n);
    125125        const String& data = t->data();
     126        if (std::numeric_limits<unsigned>::max() - data.length() < resultLength)
     127            CRASH();
    126128        resultLength += data.length();
    127129    }
Note: See TracChangeset for help on using the changeset viewer.