Closed
Bug 661867
Opened 15 years ago
Closed 15 years ago
IonMonkey: Fix null pointer deref in MUseIterator when last element of use chain is removed during iteration
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: adrake, Unassigned)
References
Details
Attachments
(1 file)
|
524 bytes,
patch
|
dvander
:
review+
|
Details | Diff | Splinter Review |
next() null pointer derefs if there's no more entries in the chain, which can happen unchecked after removing the last entry from the use chain.
Attachment #537169 -
Flags: review?(dvander)
|
||
Updated•15 years ago
|
Attachment #537169 -
Flags: review?(dvander) → review+
|
Reporter | |
Comment 1•15 years ago
|
||
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•