2011-05-19 Andrew Wilson <atwilson@chromium.org>
authorDrew Wilson <atwilson@chromium.org>
Thu, 19 May 2011 22:29:24 +0000 (22:29 +0000)
committerAdemar de Souza Reis Jr <ademar.reis@openbossa.org>
Fri, 20 May 2011 12:28:47 +0000 (09:28 -0300)
commit63adcb676f1c1f6ecbe86beb205a2450f96cd8f7
tree9cdc7ae16749191ddcaecfebadebdfe54a33a334
parent9906bdcd2f2a694087bc1a42659716e5634021b1
2011-05-19  Andrew Wilson  <atwilson@chromium.org>

        Reviewed by Darin Adler.

        MessagePortArray cloning code needs to verify source before copying
        https://bugs.webkit.org/show_bug.cgi?id=61130

        * fast/events/message-port-multi-expected.txt:
        * fast/events/resources/message-port-multi.js:
        Added test for "passing an array with an item at a really large index" to postMessage().
2011-05-19  Andrew Wilson  <atwilson@chromium.org>

        Reviewed by Darin Adler.

        MessagePortArray cloning code needs to verify source before copying.
        https://bugs.webkit.org/show_bug.cgi?id=61130

        * bindings/js/JSMessagePortCustom.cpp:
        (WebCore::fillMessagePortArray):
        Changed code to not pre-allocate the destination array.
        * bindings/v8/custom/V8MessagePortCustom.cpp:
        (WebCore::getMessagePortArray):
        Changed code to not pre-allocate the destination array.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@86899 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/fast/events/message-port-multi-expected.txt
LayoutTests/fast/events/resources/message-port-multi.js
Source/WebCore/ChangeLog
Source/WebCore/bindings/js/JSMessagePortCustom.cpp
Source/WebCore/bindings/v8/custom/V8MessagePortCustom.cpp