Closed Bug 634136 Opened 9 years ago Closed 9 years ago

TypedArrayTemplate::create needs argc check

Categories

(Core :: JavaScript Engine, defect)

defect
Not set

Tracking

()

RESOLVED FIXED
Tracking Status
blocking2.0 --- final+

People

(Reporter: luke, Assigned: luke)

Details

(Whiteboard: [fixed-in-tracemonkey][has patch][hardblocker][sg:critical])

Attachments

(1 file)

Attached patch fixSplinter Review
Uninitialized memory; potentially exploitable.
Attachment #512344 - Flags: review?(dvander)
Attachment #512344 - Flags: review?(dvander) → review+
http://hg.mozilla.org/tracemonkey/rev/6f4d01d31cc1
Whiteboard: [has patch] → [fixed-in-tracemonkey][has patch]
Whiteboard: [fixed-in-tracemonkey][has patch] → [fixed-in-tracemonkey][has patch][hardblocker]
Whiteboard: [fixed-in-tracemonkey][has patch][hardblocker] → [fixed-in-tracemonkey][has patch][hardblocker][sg:critical]
Status: ASSIGNED → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
Group: core-security
You need to log in before you can comment on or make changes to this bug.