diff options
author | Michael BrĂ¼ning <michael.bruning@digia.com> | 2013-04-18 11:03:39 +0200 |
---|---|---|
committer | The Qt Project <gerrit-noreply@qt-project.org> | 2013-04-18 11:19:20 +0200 |
commit | 3e1f0e71779c6eb8ff2ba3dd2d68a4a675419fff (patch) | |
tree | a9bedec8d6a9beacea0de24d5ecb563b40dc2040 /Source/JavaScriptCore/API/JavaScript.h | |
parent | 9e5eaab34ec9fe2a0e0ba169c939a23bef8df900 (diff) | |
download | qtwebkit-3e1f0e71779c6eb8ff2ba3dd2d68a4a675419fff.tar.gz |
[Qt][WK1] Reflect recursion limit and loop checks also for list conversions.
https://bugs.webkit.org/show_bug.cgi?id=107950
Reviewed by Allan Sandfeld Jensen.
No new tests, bugfix, no behavioral change.
Make conversions from Javascript values to QLists take the maximum
recursion depth into consideration and check for objects that were
already visited. Otherwise, the conversion may recurse until the
stack is full and then cause a segmentation fault.
* bridge/qt/qt_runtime.cpp:
(JSC::Bindings::convertToList):
(JSC::Bindings::convertValueToQVariant):
git-svn-id: http://svn.webkit.org/repository/webkit/trunk@141085 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Change-Id: I598fee74144c5298f81952b122e07e7eac47a8db
Reviewed-by: Jocelyn Turcotte <jocelyn.turcotte@digia.com>
Diffstat (limited to 'Source/JavaScriptCore/API/JavaScript.h')
0 files changed, 0 insertions, 0 deletions