[v8-dev] [v8] r23488 committed - Fix rare access violation during JS heap serialization....

Thu, 28 Aug 2014 04:45:48 -0700 

Revision: 23488
Author:   [email protected]
Date:     Thu Aug 28 11:45:20 2014 UTC
Log:      Fix rare access violation during JS heap serialization.

[email protected]

Review URL: https://codereview.chromium.org/510013002

Patch from Slava Chigrin <[email protected]>.
https://code.google.com/p/v8/source/detail?r=23488

Modified:
 /branches/bleeding_edge/src/serialize.cc

=======================================
--- /branches/bleeding_edge/src/serialize.cc    Thu Aug 28 11:27:21 2014 UTC
+++ /branches/bleeding_edge/src/serialize.cc    Thu Aug 28 11:45:20 2014 UTC
@@ -1532,7 +1532,8 @@
           current_contents == current[-1]) {
DCHECK(!serializer_->isolate()->heap()->InNewSpace(current_contents)); 
         int repeat_count = 1;
- while (current < end - 1 && current[repeat_count] == current_contents) { 
+        while (&current[repeat_count] < end - 1 &&
+               current[repeat_count] == current_contents) {
           repeat_count++;
         }
         current += repeat_count;

--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
--- You received this message because you are subscribed to the Google Groups "v8-dev" group. 
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to