Skip to content
  • inferno@chromium.org's avatar
    Add ASSERT_WITH_SECURITY_IMPLICATION to detect out of bounds access · a227be6d
    inferno@chromium.org authored
    https://bugs.webkit.org/show_bug.cgi?id=108981
    
    Reviewed by Eric Seidel.
    
    Source/WebCore:
    
    * Modules/mediastream/RTCStatsResponse.cpp:
    (WebCore::RTCStatsResponse::addElement):
    (WebCore::RTCStatsResponse::addStatistic):
    * Modules/websockets/WebSocketChannel.cpp:
    (WebCore::WebSocketChannel::skipBuffer):
    * css/CSSCalculationValue.cpp:
    (WebCore::CSSCalcExpressionNodeParser::parseValueMultiplicativeExpression):
    (WebCore::CSSCalcExpressionNodeParser::parseAdditiveValueExpression):
    * css/WebKitCSSTransformValue.cpp:
    (WebCore::transformValueToCssString):
    * editing/TextIterator.cpp:
    (WebCore::SearchBuffer::search):
    * html/HTMLElement.cpp:
    (WebCore::parseColorStringWithCrazyLegacyRules):
    * html/ImageData.cpp:
    (WebCore::ImageData::ImageData):
    * html/shadow/DateTimeSymbolicFieldElement.cpp:
    (WebCore::DateTimeSymbolicFieldElement::DateTimeSymbolicFieldElement):
    * html/track/TextTrackCueList.cpp:
    (WebCore::TextTrackCueList::add):
    * platform/SharedBuffer.cpp:
    (WebCore::SharedBuffer::getSomeData):
    * platform/SharedBufferChunkReader.cpp:
    (WebCore::SharedBufferChunkReader::nextChunk):
    * platform/audio/HRTFDatabase.cpp:
    (WebCore::HRTFDatabase::getKernelsFromAzimuthElevation):
    * platform/graphics/GlyphPageTreeNode.cpp:
    (WebCore::GlyphPageTreeNode::initializePage):
    * platform/graphics/Region.cpp:
    (WebCore::Region::Shape::segments_end):
    * platform/graphics/filters/FEComponentTransfer.cpp:
    (WebCore::FEComponentTransfer::getValues):
    * platform/graphics/filters/FilterEffect.cpp:
    (WebCore::FilterEffect::inputEffect):
    * platform/text/TextCodecUTF8.cpp:
    (WebCore::TextCodecUTF8::decode):
    * platform/text/mac/TextCodecMac.cpp:
    (WebCore::TextCodecMac::decode):
    * rendering/RenderBlockLineLayout.cpp:
    (WebCore::RenderBlock::checkFloatsInCleanLine):
    * svg/SVGAnimatedTypeAnimator.h:
    (WebCore::SVGAnimatedTypeAnimator::executeAction):
    * svg/SVGAnimationElement.cpp:
    (WebCore::SVGAnimationElement::calculatePercentForSpline):
    * svg/animation/SVGSMILElement.cpp:
    (WebCore::SVGSMILElement::findInstanceTime):
    
    Source/WebKit/chromium:
    
    * src/AutofillPopupMenuClient.cpp:
    (WebKit::AutofillPopupMenuClient::getSuggestion):
    (WebKit::AutofillPopupMenuClient::getLabel):
    (WebKit::AutofillPopupMenuClient::getIcon):
    (WebKit::AutofillPopupMenuClient::removeSuggestionAtIndex):
    (WebKit::AutofillPopupMenuClient::valueChanged):
    (WebKit::AutofillPopupMenuClient::selectionChanged):
    * src/ChromeClientImpl.cpp:
    (WebKit::ChromeClientImpl::shouldRunModalDialogDuringPageDismissal):
    
    Source/WTF:
    
    * wtf/BitVector.h:
    (WTF::BitVector::quickGet):
    (WTF::BitVector::quickSet):
    (WTF::BitVector::quickClear):
    * wtf/DecimalNumber.h:
    (WTF::DecimalNumber::DecimalNumber):
    * wtf/SegmentedVector.h:
    (WTF::SegmentedVector::ensureSegment):
    * wtf/StringPrintStream.cpp:
    (WTF::StringPrintStream::vprintf):
    * wtf/Vector.h:
    (WTF::::insert):
    (WTF::::remove):
    * wtf/dtoa/utils.h:
    (WTF::double_conversion::StringBuilder::SetPosition):
    (WTF::double_conversion::StringBuilder::AddSubstring):
    
    
    git-svn-id: http://svn.webkit.org/repository/webkit/trunk@142434 268f45cc-cd09-0410-ab3c-d52691b4dbfc
    a227be6d