Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(90)

Issue 2514983002: [wasm] Throw a RangeError if Wasm memory could not be allocated. (Closed)

Created:
4 years, 1 month ago by Eric Holk
Modified:
4 years, 1 month ago
CC:
v8-reviews_googlegroups.com
Target Ref:
refs/pending/heads/master
Project:
v8
Visibility:
Public.

Description

[wasm] Throw a RangeError if Wasm memory could not be allocated. This fixes a bug found by the fuzzer where we would attempt to dereference a null handle if memory allocation failed. In this case, the failure was because the amount of memory requested was above V8's hardcoded limit. BUG= https://bugs.chromium.org/p/chromium/issues/detail?id=666741 Committed: https://crrev.com/d0fe942d2304655f587f49a0b6a1c9a079692912 Cr-Commit-Position: refs/heads/master@{#41158}

Patch Set 1 #

Total comments: 2

Patch Set 2 : Merging with master #

Patch Set 3 : Fixing nits #

Unified diffs Side-by-side diffs Delta from patch set Stats (+9 lines, -6 lines) Patch
M src/wasm/wasm-js.cc View 2 chunks +5 lines, -2 lines 0 comments Download
A + test/mjsunit/regress/wasm/regression-666741.js View 1 2 1 chunk +4 lines, -4 lines 0 comments Download

Messages

Total messages: 15 (9 generated)
Eric Holk
4 years, 1 month ago (2016-11-18 21:28:04 UTC) #2
titzer
lgtm with nit https://codereview.chromium.org/2514983002/diff/1/test/mjsunit/regress/wasm/regression-666741.js File test/mjsunit/regress/wasm/regression-666741.js (right): https://codereview.chromium.org/2514983002/diff/1/test/mjsunit/regress/wasm/regression-666741.js#newcode8 test/mjsunit/regress/wasm/regression-666741.js:8: try { You can use one ...
4 years, 1 month ago (2016-11-18 23:19:29 UTC) #5
Eric Holk
https://codereview.chromium.org/2514983002/diff/1/test/mjsunit/regress/wasm/regression-666741.js File test/mjsunit/regress/wasm/regression-666741.js (right): https://codereview.chromium.org/2514983002/diff/1/test/mjsunit/regress/wasm/regression-666741.js#newcode8 test/mjsunit/regress/wasm/regression-666741.js:8: try { On 2016/11/18 23:19:29, titzer wrote: > You ...
4 years, 1 month ago (2016-11-21 21:15:15 UTC) #8
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.org/2514983002/40001
4 years, 1 month ago (2016-11-21 21:15:31 UTC) #11
commit-bot: I haz the power
Committed patchset #3 (id:40001)
4 years, 1 month ago (2016-11-21 21:58:42 UTC) #13
commit-bot: I haz the power
4 years, 1 month ago (2016-11-21 21:59:01 UTC) #15
Message was sent while issue was closed.
Patchset 3 (id:??) landed as
https://crrev.com/d0fe942d2304655f587f49a0b6a1c9a079692912
Cr-Commit-Position: refs/heads/master@{#41158}

Powered by Google App Engine
This is Rietveld 408576698