The default bug view has changed. See this FAQ.

Fix typo in OOM check in DefineMetaTypeDescr

RESOLVED FIXED in mozilla31

Status

()

Core
JavaScript Engine
RESOLVED FIXED
3 years ago
3 years ago

People

(Reporter: jorendorff, Assigned: jorendorff)

Tracking

(Blocks: 2 bugs)

unspecified
mozilla31
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Assignee)

Description

3 years ago
Found by decoder's OOM fuzzer. Apparently not exploitable.
(Assignee)

Comment 1

3 years ago
Created attachment 8404054 [details] [diff] [review]
bug-994159-oom-DefineMetaTypeDescr-v1.patch
Assignee: general → jorendorff
Attachment #8404054 - Flags: review?(nmatsakis)
Attachment #8404054 - Flags: review?(nmatsakis) → review+
(Assignee)

Comment 2

3 years ago
https://hg.mozilla.org/integration/mozilla-inbound/rev/ac3d60d50ccd
https://hg.mozilla.org/mozilla-central/rev/ac3d60d50ccd
Status: NEW → RESOLVED
Last Resolved: 3 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla31
You need to log in before you can comment on or make changes to this bug.