wine/gecko
0
0
Fork 0
mirror of https://gitlab.winehq.org/wine/wine-gecko.git synced 2024-09-13 09:24:08 -07:00
Code Issues Packages Projects Releases Wiki Activity

Abort recording on invalid string indexes for JSOP_GETELEM (bug 452713, r=brendan).

Browse Source
This commit is contained in:
David Anderson 2008-08-29 13:05:41 -07:00
parent f35adba372
commit f10bd19c8e
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
js/src/jstracer.cpp
View File

@ -4029,6 +4029,12 @@ TraceRecorder::record_JSOP_GETELEM()
jsval& l = stackval(-2);
if (JSVAL_IS_STRING(l) && JSVAL_IS_INT(r)) {
int i;
i = JSVAL_TO_INT(r);
if ((size_t)i >= JSSTRING_LENGTH(JSVAL_TO_STRING(l)))
ABORT_TRACE("Invalid string index in JSOP_GETELEM");
LIns* args[] = { f2i(get(&r)), get(&l), cx_ins };
LIns* unitstr_ins = lir->insCall(F_String_getelem, args);
guard(false, lir->ins_eq0(unitstr_ins), MISMATCH_EXIT);