-
barraclough@apple.com authored
Addition of 2 strings of length 2^31 may result in a string of length 0. Reviewed by Oliver Hunt. Check for overflow when creating a new JSString as a result of an addition or concatenation, throw an out of memory exception. * runtime/JSString.h: (JSC::): * runtime/Operations.h: (JSC::jsString): git-svn-id: http://svn.webkit.org/repository/webkit/trunk@54925 268f45cc-cd09-0410-ab3c-d52691b4dbfc
9f6d7a00