Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(401)

Issue 1340883002: Avoid stack overflow in InputType::applyStep(). (Closed)

Created:
5 years, 3 months ago by tkent
Modified:
5 years, 3 months ago
Reviewers:
keishi
CC:
blink-reviews, dglazkov+blink, blink-reviews-html_chromium.org
Target Ref:
refs/heads/master
Project:
blink
Visibility:
Public.

Description

Avoid stack overflow in InputType::applyStep(). applyStep(current, count, ...) calls applyStep(aligned-current, count-1, ...) if the current value doesn't match to the |step| value, and we assumed the second call of applyStep didn't call another applyStep(). However, if an adjusted value is greater than the maximum value or is smaller than the minimum value, we clamped the value. So, the second call of applyStep could be step-mismatched value, and called applyStep continuously. This CL does: - Remove the clamping code. The specification doesn't define such clamping. - Remove recursive calls. It was tail recursions. Some tests fail intentionally because of the clamping removal. A follow-up CL will fix them. BUG=529610 Committed: https://crrev.com/ebc1f01b3fdba6c8b1b2b1075e029cd317c685ee git-svn-id: svn://svn.chromium.org/blink/trunk@202214 bbb929c8-8fbe-4397-9dbb-9b2b20218538

Patch Set 1 : #

Total comments: 3

Messages

Total messages: 36 (17 generated)
tkent
Keishi, would you review this please? https://codereview.chromium.org/1340883002/diff/20001/Source/core/html/forms/InputType.cpp File Source/core/html/forms/InputType.cpp (left): https://codereview.chromium.org/1340883002/diff/20001/Source/core/html/forms/InputType.cpp#oldcode787 Source/core/html/forms/InputType.cpp:787: if (newValue < ...
5 years, 3 months ago (2015-09-14 04:19:37 UTC) #3
keishi
LGTM
5 years, 3 months ago (2015-09-14 05:37:09 UTC) #4
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1340883002/20001 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/1340883002/20001
5 years, 3 months ago (2015-09-14 05:37:57 UTC) #6
commit-bot: I haz the power
Try jobs failed on following builders: linux_chromium_gn_rel on tryserver.chromium.linux (JOB_FAILED, http://build.chromium.org/p/tryserver.chromium.linux/builders/linux_chromium_gn_rel/builds/133220)
5 years, 3 months ago (2015-09-14 06:15:58 UTC) #8
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1340883002/20001 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/1340883002/20001
5 years, 3 months ago (2015-09-14 06:17:14 UTC) #10
commit-bot: I haz the power
Try jobs failed on following builders: linux_chromium_gn_rel on tryserver.chromium.linux (JOB_FAILED, http://build.chromium.org/p/tryserver.chromium.linux/builders/linux_chromium_gn_rel/builds/133238)
5 years, 3 months ago (2015-09-14 06:54:43 UTC) #12
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1340883002/20001 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/1340883002/20001
5 years, 3 months ago (2015-09-14 07:01:35 UTC) #14
commit-bot: I haz the power
Try jobs failed on following builders: linux_chromium_gn_rel on tryserver.chromium.linux (JOB_FAILED, http://build.chromium.org/p/tryserver.chromium.linux/builders/linux_chromium_gn_rel/builds/133252)
5 years, 3 months ago (2015-09-14 07:37:20 UTC) #16
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1340883002/20001 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/1340883002/20001
5 years, 3 months ago (2015-09-14 07:39:17 UTC) #18
commit-bot: I haz the power
Try jobs failed on following builders: linux_chromium_gn_rel on tryserver.chromium.linux (JOB_FAILED, http://build.chromium.org/p/tryserver.chromium.linux/builders/linux_chromium_gn_rel/builds/133266)
5 years, 3 months ago (2015-09-14 08:13:12 UTC) #20
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1340883002/20001 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/1340883002/20001
5 years, 3 months ago (2015-09-14 08:37:47 UTC) #22
commit-bot: I haz the power
Try jobs failed on following builders: linux_chromium_gn_rel on tryserver.chromium.linux (JOB_FAILED, http://build.chromium.org/p/tryserver.chromium.linux/builders/linux_chromium_gn_rel/builds/133272)
5 years, 3 months ago (2015-09-14 09:22:48 UTC) #24
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1340883002/20001 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/1340883002/20001
5 years, 3 months ago (2015-09-14 11:46:44 UTC) #26
commit-bot: I haz the power
Try jobs failed on following builders: linux_chromium_gn_rel on tryserver.chromium.linux (JOB_FAILED, http://build.chromium.org/p/tryserver.chromium.linux/builders/linux_chromium_gn_rel/builds/133290)
5 years, 3 months ago (2015-09-14 12:34:35 UTC) #28
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1340883002/20001 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/1340883002/20001
5 years, 3 months ago (2015-09-14 16:13:05 UTC) #30
commit-bot: I haz the power
Try jobs failed on following builders: linux_chromium_gn_rel on tryserver.chromium.linux (JOB_FAILED, http://build.chromium.org/p/tryserver.chromium.linux/builders/linux_chromium_gn_rel/builds/133326)
5 years, 3 months ago (2015-09-14 16:54:42 UTC) #32
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1340883002/20001 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/1340883002/20001
5 years, 3 months ago (2015-09-14 17:44:37 UTC) #34
commit-bot: I haz the power
Committed patchset #1 (id:20001) as https://src.chromium.org/viewvc/blink?view=rev&revision=202214
5 years, 3 months ago (2015-09-14 18:10:52 UTC) #35
commit-bot: I haz the power
5 years, 3 months ago (2015-09-23 12:34:19 UTC) #36
Message was sent while issue was closed.
Patchset 1 (id:??) landed as
https://crrev.com/ebc1f01b3fdba6c8b1b2b1075e029cd317c685ee

Powered by Google App Engine
This is Rietveld 408576698