Disallow sequences with lengths exceeding max allocation supported.

third_party/WebKit/Source/wtf/Vector.h

 /*
  *  Copyright (C) 2005, 2006, 2007, 2008 Apple Inc. All rights reserved.
  *
  *  This library is free software; you can redistribute it and/or
  *  modify it under the terms of the GNU Library General Public
  *  License as published by the Free Software Foundation; either
  *  version 2 of the License, or (at your option) any later version.
  *
  *  This library is distributed in the hope that it will be useful,
  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
@@ skipping 317 matching lines @@
 };
 
 template <typename T, bool hasInlineCapacity, typename Allocator>
 class VectorBufferBase {
   WTF_MAKE_NONCOPYABLE(VectorBufferBase);
   DISALLOW_NEW();
 
  public:
   void allocateBuffer(size_t newCapacity) {
     DCHECK(newCapacity);
+    DCHECK_LE(newCapacity,
+              Allocator::template maxElementCountInBackingStore<T>());
     size_t sizeToAllocate = allocationSize(newCapacity);
     if (hasInlineCapacity)
       m_buffer =
           Allocator::template allocateInlineVectorBacking<T>(sizeToAllocate);
     else
       m_buffer = Allocator::template allocateVectorBacking<T>(sizeToAllocate);
     m_capacity = sizeToAllocate / sizeof(T);
   }
 
   void allocateExpandedBuffer(size_t newCapacity) {
@@ skipping 642 matching lines @@
 
   template <typename Iterator>
   void appendRange(Iterator start, Iterator end);
 
   void swap(Vector& other) {
     Base::swapVectorBuffer(other, OffsetRange(), OffsetRange());
   }
 
   void reverse();
 
+  // Maximum element count supported; allocating a vector
+  // buffer with a larger count will fail.
+  static size_t maxCapacity() {
+    return Allocator::template maxElementCountInBackingStore<T>();
+  }
+
   template <typename VisitorDispatcher>
   void trace(VisitorDispatcher);
 
   class GCForbiddenScope {
     STACK_ALLOCATED();
 
    public:
     GCForbiddenScope() { Allocator::enterGCForbiddenScope(); }
     ~GCForbiddenScope() { Allocator::leaveGCForbiddenScope(); }
   };
@@ skipping 601 matching lines @@
           visitor, *const_cast<T*>(bufferEntry));
     checkUnusedSlots(buffer() + size(), buffer() + capacity());
   }
 }
 
 }  // namespace WTF
 
 using WTF::Vector;
 
 #endif  // WTF_Vector_h