Title: [269019] trunk/Source/WTF
Revision
269019
Author
[email protected]
Date
2020-10-26 19:07:46 -0700 (Mon, 26 Oct 2020)

Log Message

Add extra validation to MetaAllocator::findAndRemoveFreeSpace
https://bugs.webkit.org/show_bug.cgi?id=217792
<rdar://problem/69433015>

Reviewed Saam Barati.

* wtf/MetaAllocator.cpp:
(WTF::MetaAllocator::findAndRemoveFreeSpace):

Modified Paths

Diff

Modified: trunk/Source/WTF/ChangeLog (269018 => 269019)


--- trunk/Source/WTF/ChangeLog	2020-10-27 02:05:34 UTC (rev 269018)
+++ trunk/Source/WTF/ChangeLog	2020-10-27 02:07:46 UTC (rev 269019)
@@ -1,3 +1,14 @@
+2020-10-15  Tadeu Zagallo  <[email protected]>
+
+        Add extra validation to MetaAllocator::findAndRemoveFreeSpace
+        https://bugs.webkit.org/show_bug.cgi?id=217792
+        <rdar://problem/69433015>
+
+        Reviewed Saam Barati.
+
+        * wtf/MetaAllocator.cpp:
+        (WTF::MetaAllocator::findAndRemoveFreeSpace):
+
 2020-10-13  Tadeu Zagallo  <[email protected]>
 
         Assert that WTF::HashTable does not visit the same bucket twice

Modified: trunk/Source/WTF/wtf/MetaAllocator.cpp (269018 => 269019)


--- trunk/Source/WTF/wtf/MetaAllocator.cpp	2020-10-27 02:05:34 UTC (rev 269018)
+++ trunk/Source/WTF/wtf/MetaAllocator.cpp	2020-10-27 02:07:46 UTC (rev 269019)
@@ -211,7 +211,7 @@
         return nullptr;
     
     size_t nodeSizeInBytes = node->sizeInBytes();
-    ASSERT(nodeSizeInBytes >= sizeInBytes);
+    RELEASE_ASSERT(nodeSizeInBytes >= sizeInBytes);
 
     m_freeSpaceSizeMap.remove(node);
 
@@ -246,6 +246,7 @@
             m_freeSpaceStartAddressMap.remove(node->m_start);
 
             node->m_start += sizeInBytes;
+            RELEASE_ASSERT(nodeStartAsInt < node->m_start.untaggedPtr<uintptr_t>() && node->m_start.untaggedPtr<uintptr_t>() < node->m_end.untaggedPtr<uintptr_t>());
 
             m_freeSpaceSizeMap.insert(node);
             m_freeSpaceStartAddressMap.add(node->m_start, node);
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to