git://git.webkit.org / WebKit-https.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4395254) | patch
2007-11-30 Eric Seidel <eric@webkit.org>
authoreric@webkit.org <eric@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Fri, 30 Nov 2007 23:43:45 +0000 (23:43 +0000)
committereric@webkit.org <eric@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Fri, 30 Nov 2007 23:43:45 +0000 (23:43 +0000)
commit8ff38002389598f87e89bc22e253a6f659846b40
tree26052afa9324c7a413ac5767bf7bc14a2a074b6ctree | snapshot
parent439525434394847740d798005a6fef225b21eb64commit | diff
2007-11-30  Eric Seidel  <eric@webkit.org>

        Reviewed by darin.

        PCRE crashes under GuardMalloc
        http://bugs.webkit.org/show_bug.cgi?id=16127
        check against patternEnd to make sure we don't walk off the end of the string

        * pcre/pcre_compile.cpp:
        (compile_branch):
        (calculateCompiledPatternLengthAndFlags):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@28260 268f45cc-cd09-0410-ab3c-d52691b4dbfc
JavaScriptCore/ChangeLog diff | blob | history
JavaScriptCore/pcre/pcre_compile.cpp diff | blob | history
LayoutTests/ChangeLog diff | blob | history
LayoutTests/fast/js/regexp-compile-crash-expected.txt [new file with mode: 0644] blob
LayoutTests/fast/js/regexp-compile-crash.html [new file with mode: 0644] blob
LayoutTests/fast/js/resources/regexp-compile-crash.js [new file with mode: 0644] blob
WebCore/WebCore.xcodeproj/project.pbxproj diff | blob | history
Mirror of the WebKit open source project from svn.webkit.org.