Skip to content
  • inferno@chromium.org's avatar
    Add ASSERT_WITH_SECURITY_IMPLICATION to detect out of bounds access · 7223e457
    inferno@chromium.org authored
    https://bugs.webkit.org/show_bug.cgi?id=108668
    
    Reviewed by Eric Seidel.
    
    Source/WebCore:
    
    * bindings/v8/SerializedScriptValue.cpp:
    * css/CSSCalculationValue.cpp:
    (WebCore::CSSCalcExpressionNodeParser::parseCalc):
    * css/CSSImageSetValue.cpp:
    (WebCore::CSSImageSetValue::fillImageSet):
    (WebCore::CSSImageSetValue::customCssText):
    * css/CSSParserValues.h:
    (WebCore::CSSParserString::operator[]):
    * css/CSSValueList.h:
    (WebCore::CSSValueListInspector::item):
    * css/StyleSheetContents.cpp:
    (WebCore::StyleSheetContents::ruleAt):
    (WebCore::StyleSheetContents::wrapperInsertRule):
    (WebCore::StyleSheetContents::wrapperDeleteRule):
    * dom/Document.cpp:
    (WebCore::Document::processArguments):
    * dom/Element.cpp:
    (WebCore::Element::removeAttributeInternal):
    * dom/ElementAttributeData.cpp:
    (WebCore::ElementAttributeData::removeAttribute):
    * dom/ElementAttributeData.h:
    (WebCore::ElementAttributeData::attributeItem):
    * dom/SpaceSplitString.h:
    (WebCore::SpaceSplitStringData::operator[]):
    (WebCore::SpaceSplitString::operator[]):
    * editing/TextIterator.cpp:
    (WebCore::TextIterator::characterAt):
    * html/HTMLFormElement.cpp:
    (WebCore::HTMLFormElement::removeFormElement):
    * html/HTMLSelectElementWin.cpp:
    (WebCore::HTMLSelectElement::platformHandleKeydownEvent):
    * html/canvas/WebGLRenderingContext.cpp:
    (WebCore):
    * html/parser/HTMLFormattingElementList.cpp:
    (WebCore::HTMLFormattingElementList::swapTo):
    * inspector/InspectorStyleSheet.cpp:
    (WebCore::InspectorStyleSheet::styleSheetTextWithChangedStyle):
    * inspector/InspectorStyleTextEditor.cpp:
    (WebCore::InspectorStyleTextEditor::replaceProperty):
    * inspector/InspectorValues.cpp:
    (WebCore::InspectorArrayBase::get):
    * page/WindowFeatures.cpp:
    (WebCore::WindowFeatures::WindowFeatures):
    * platform/audio/AudioArray.h:
    (WebCore::AudioArray::at):
    * platform/audio/AudioFIFO.cpp:
    (WebCore::AudioFIFO::findWrapLengths):
    * platform/graphics/GlyphPage.h:
    (WebCore::GlyphPage::glyphDataForIndex):
    (WebCore::GlyphPage::glyphAt):
    (WebCore::GlyphPage::setGlyphDataForIndex):
    * platform/graphics/TextRun.h:
    (WebCore::TextRun::operator[]):
    (WebCore::TextRun::data8):
    (WebCore::TextRun::data16):
    * platform/graphics/harfbuzz/HarfBuzzShaper.cpp:
    (WebCore::HarfBuzzShaper::setDrawRange):
    * platform/graphics/openvg/TiledImageOpenVG.cpp:
    (WebCore::TiledImageOpenVG::setTile):
    (WebCore::TiledImageOpenVG::tile):
    * platform/image-decoders/ico/ICOImageDecoder.cpp:
    (WebCore::ICOImageDecoder::decodeAtIndex):
    (WebCore::ICOImageDecoder::imageTypeAtIndex):
    * platform/text/QuotedPrintable.cpp:
    (WebCore::lengthOfLineEndingAtIndex):
    * platform/text/SegmentedString.cpp:
    (WebCore::SegmentedString::advance):
    * platform/win/WebCoreTextRenderer.cpp:
    (WebCore::doDrawTextAtPoint):
    * rendering/InlineTextBox.cpp:
    (WebCore::InlineTextBox::paint):
    (WebCore::InlineTextBox::paintSelection):
    
    Source/WebKit/chromium:
    
    * src/ContextFeaturesClientImpl.cpp:
    (WebKit::ContextFeaturesCache::entryFor):
    * src/WebFrameImpl.cpp:
    (WebKit::WebFrameImpl::selectFindMatch):
    
    Source/WebKit2:
    
    * Shared/mac/SandboxExtensionMac.mm:
    (WebKit::SandboxExtension::HandleArray::operator[]):
    
    Source/WTF:
    
    * wtf/AVLTree.h:
    (WTF::AVLTreeDefaultBSet::operator[]):
    * wtf/BitArray.h:
    (WTF::BitArray::set):
    (WTF::BitArray::get):
    * wtf/FastBitVector.h:
    (WTF::FastBitVector::set):
    (WTF::FastBitVector::clear):
    (WTF::FastBitVector::get):
    * wtf/FixedArray.h:
    (WTF::FixedArray::operator[]):
    * wtf/RefCountedArray.h:
    (WTF::RefCountedArray::at):
    * wtf/TypedArrayBase.h:
    (WTF::TypedArrayBase::item):
    * wtf/text/StringBuffer.h:
    (WTF::StringBuffer::operator[]):
    * wtf/text/StringBuilder.h:
    (WTF::StringBuilder::operator[]):
    * wtf/text/StringImpl.h:
    (WTF::StringImpl::operator[]):
    
    
    git-svn-id: http://svn.webkit.org/repository/webkit/trunk@141816 268f45cc-cd09-0410-ab3c-d52691b4dbfc
    7223e457