Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(54)

Issue 2769033002: [sql] WebSQL xGetLastError() can be called with null buffer. (Closed)

Created:
3 years, 9 months ago by Scott Hess - ex-Googler
Modified:
3 years, 9 months ago
Reviewers:
michaeln
CC:
chromium-reviews, haraken, blink-reviews
Target Ref:
refs/heads/master
Project:
chromium
Visibility:
Public.

Description

[sql] WebSQL xGetLastError() can be called with null buffer. Previously, xGetLastError() was never called, more recently it is called. os_win.c indicates that it can just make sure the buffer is empty, but SQLite 3.17 calls it with a NULL pointer (and zero length) in sqlite3OsGetLastError(). BUG=704009, 701518 Review-Url: https://codereview.chromium.org/2769033002 Cr-Commit-Position: refs/heads/master@{#459210} Committed: https://chromium.googlesource.com/chromium/src/+/c9416cfaa6e0303da35d21214502be39239032a8

Patch Set 1 #

Total comments: 1
Unified diffs Side-by-side diffs Delta from patch set Stats (+6 lines, -8 lines) Patch
M third_party/WebKit/Source/modules/webdatabase/sqlite/SQLiteFileSystemPosix.cpp View 1 chunk +3 lines, -4 lines 1 comment Download
M third_party/WebKit/Source/modules/webdatabase/sqlite/SQLiteFileSystemWin.cpp View 1 chunk +3 lines, -4 lines 0 comments Download

Messages

Total messages: 14 (8 generated)
Scott Hess - ex-Googler
http://crbug.com/704009 is a null deref in this fn, which I traced to the fn mentioned ...
3 years, 9 months ago (2017-03-22 23:39:46 UTC) #4
Scott Hess - ex-Googler
Ping?
3 years, 9 months ago (2017-03-23 19:48:51 UTC) #7
michaeln
https://codereview.chromium.org/2769033002/diff/1/third_party/WebKit/Source/modules/webdatabase/sqlite/SQLiteFileSystemPosix.cpp File third_party/WebKit/Source/modules/webdatabase/sqlite/SQLiteFileSystemPosix.cpp (right): https://codereview.chromium.org/2769033002/diff/1/third_party/WebKit/Source/modules/webdatabase/sqlite/SQLiteFileSystemPosix.cpp#newcode331 third_party/WebKit/Source/modules/webdatabase/sqlite/SQLiteFileSystemPosix.cpp:331: int chromiumGetLastError(sqlite3_vfs* vfs, int nBuf, char* zBuf) { lgtm
3 years, 9 months ago (2017-03-23 20:36:33 UTC) #8
Scott Hess - ex-Googler
On 2017/03/23 20:36:33, michaeln wrote: > https://codereview.chromium.org/2769033002/diff/1/third_party/WebKit/Source/modules/webdatabase/sqlite/SQLiteFileSystemPosix.cpp > File > third_party/WebKit/Source/modules/webdatabase/sqlite/SQLiteFileSystemPosix.cpp > (right): > > ...
3 years, 9 months ago (2017-03-23 20:44:01 UTC) #10
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.org/2769033002/1
3 years, 9 months ago (2017-03-23 20:44:27 UTC) #11
commit-bot: I haz the power
3 years, 9 months ago (2017-03-23 20:50:33 UTC) #14
Message was sent while issue was closed.
Committed patchset #1 (id:1) as
https://chromium.googlesource.com/chromium/src/+/c9416cfaa6e0303da35d21214502...

Powered by Google App Engine
This is Rietveld 408576698