Skip to content
  • akling@apple.com's avatar
    Replace bounds checking ASSERTs with ASSERT_WITH_SECURITY_IMPLICATION · 2207aeb7
    akling@apple.com authored
    https://bugs.webkit.org/show_bug.cgi?id=120893
    
    Patch by Jessica Pease <jessica_n_pease@apple.com> on 2013-09-06
    Reviewed by Darin Adler.
    
    Source/WebCore:
    
    * Modules/indexeddb/IDBKeyPath.cpp:
    (WebCore::IDBKeyPathLexer::lex):
    * Modules/indexeddb/IDBLevelDBCoding.cpp:
    (WebCore::IDBLevelDBCoding::compareEncodedIDBKeys):
    * bindings/js/JSCSSStyleDeclarationCustom.cpp:
    (WebCore::cssPropertyIDForJSCSSPropertyName):
    * css/CSSFontSelector.cpp:
    (WebCore::compareFontFaces):
    * css/CSSParser.cpp:
    (WebCore::CSSParser::rewriteSpecifiers):
    * html/HTMLCollection.cpp:
    (WebCore::traverseMatchingElementsForwardToOffset):
    (WebCore::LiveNodeListBase::traverseChildNodeListForwardToOffset):
    (WebCore::HTMLCollection::traverseForwardToOffset):
    * html/HTMLFontElement.cpp:
    (WebCore::parseFontSize):
    * html/parser/HTMLParserIdioms.cpp:
    (WebCore::parseHTMLIntegerInternal):
    (WebCore::parseHTMLNonNegativeIntegerInternal):
    * inspector/InspectorStyleSheet.h:
    (WebCore::InspectorStyleProperty::setRawTextFromStyleDeclaration):
    * platform/graphics/StringTruncator.cpp:
    (WebCore::centerTruncateToBuffer):
    (WebCore::rightTruncateToBuffer):
    (WebCore::truncateString):
    * platform/graphics/TextRun.h:
    (WebCore::TextRun::subRun):
    * platform/text/BidiRunList.h:
    (WebCore::::reverseRuns):
    * rendering/svg/SVGInlineTextBox.cpp:
    (WebCore::SVGInlineTextBox::selectionRectForTextFragment):
    (WebCore::SVGInlineTextBox::mapStartEndPositionsIntoFragmentCoordinates):
    * rendering/svg/SVGTextChunkBuilder.cpp:
    (WebCore::SVGTextChunkBuilder::buildTextChunks):
    * rendering/svg/SVGTextLayoutEngine.cpp:
    (WebCore::SVGTextLayoutEngine::currentLogicalCharacterMetrics):
    * rendering/svg/SVGTextQuery.cpp:
    (WebCore::SVGTextQuery::mapStartEndPositionsIntoFragmentCoordinates):
    * svg/SVGAnimationElement.cpp:
    (WebCore::SVGAnimationElement::currentValuesForValuesAnimation):
    * svg/SVGPathByteStreamSource.h:
    (WebCore::SVGPathByteStreamSource::readType):
    
    Source/WebKit2:
    
    * Shared/Plugins/PluginQuirks.h:
    (WebKit::PluginQuirks::add):
    
    Source/WTF:
    
    * wtf/BumpPointerAllocator.h:
    (WTF::BumpPointerPool::ensureCapacity):
    (WTF::BumpPointerPool::alloc):
    (WTF::BumpPointerPool::ensureCapacityCrossPool):
    * wtf/FastMalloc.cpp:
    (WTF::TCMalloc_ThreadCache::CreateCacheIfNecessary):
    * wtf/StringPrintStream.cpp:
    (WTF::StringPrintStream::increaseSize):
    * wtf/dtoa/utils.h:
    (WTF::double_conversion::BufferReference::SubBufferReference):
    * wtf/text/WTFString.cpp:
    (WTF::String::fromUTF8):
    
    git-svn-id: http://svn.webkit.org/repository/webkit/trunk@157341 268f45cc-cd09-0410-ab3c-d52691b4dbfc
    2207aeb7