Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 6dd5690bed2cc05518d594287d6520a1847c1e96
https://github.com/WebKit/WebKit/commit/6dd5690bed2cc05518d594287d6520a1847c1e96
Author: Chirag M Shah <chirag_m_s...@apple.com>
Date: 2023-01-25 (Wed, 25 Jan 2023)
Changed paths:
M Source/WebCore/Modules/websockets/WebSocketDeflater.cpp
Log Message:
-----------
Cherry-pick 252432.940@safari-7614-branch (e34a3c3b5918).
rdar://problem/104648708
Fix int overflow leading to OOB write
rdar://problem/80071711
Reviewed by Chris Dumez and Ryan Haddad.
* Source/WebCore/Modules/websockets/WebSocketDeflater.cpp:
(WebCore::WebSocketDeflater::addBytes):
(WebCore::WebSocketDeflater::finish):
(WebCore::WebSocketInflater::addBytes):
(WebCore::WebSocketInflater::finish):
* Source/WebCore/rendering/updating/RenderTreeBuilder.cpp:
(WebCore::RenderTreeBuilder::destroy):
(WebCore::RenderTreeBuilder::attach):
(WebCore::RenderTreeBuilder::attachToRenderElementInternal):
* Source/WebCore/rendering/updating/RenderTreeUpdater.cpp:
(WebCore::RenderTreeUpdater::createTextRenderer):
Canonical link: https://commits.webkit.org/252432.940@safari-7614-branch
Canonical link: https://commits.webkit.org/259375@main
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
