projects / platform / upstream / v8.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 35a80e1) | patch
Landing for pmehta.
authorager@chromium.org <ager@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Mon, 19 Jul 2010 10:02:11 +0000 (10:02 +0000)
committerager@chromium.org <ager@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Mon, 19 Jul 2010 10:02:11 +0000 (10:02 +0000)
commit2a877bfc95be4c2952ba5a03c5282452036dc33a
tree1ab75456d06ef1bf664d1bdc98d9a7f11f5a44detree | snapshot
parent35a80e16241308b4f476875d0f96282cf697a029commit | diff
Landing for pmehta.

Changed a static cast from static_cast<int> to static_cast<size_t>
that previously introduced a signed/unsigned comparison issue in the
main allocator for V8 (MemoryAllocator::AllocateRawMemory) that could
be used to bypass the V8 allocation limitations or trigger integer
overflows.

Review URL: http://codereview.chromium.org/3027006/show

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@5094 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/spaces.cc diff | blob | history
Domain: Web Framework / Web Engine;