Bug 128437 - [ASan] Use new/delete in PODFreeListArena
Summary: [ASan] Use new/delete in PODFreeListArena
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: Tools / Tests (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: David Kilzer (:ddkilzer)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-02-07 20:26 PST by David Kilzer (:ddkilzer)
Modified: 2014-02-07 21:28 PST (History)
9 users (show)

See Also:


Attachments
Patch v1 (1.92 KB, patch)
2014-02-07 20:45 PST, David Kilzer (:ddkilzer)
no flags Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description David Kilzer (:ddkilzer) 2014-02-07 20:26:19 PST
The PODFreeListArena class doesn't actually deallocate objects when they're freed, so address sanitizer builds of WebKit won't catch use-after-free issues with objects that use it.
Comment 1 David Kilzer (:ddkilzer) 2014-02-07 20:45:48 PST
Created attachment 223542 [details]
Patch v1
Comment 2 WebKit Commit Bot 2014-02-07 21:28:10 PST
Comment on attachment 223542 [details]
Patch v1

Clearing flags on attachment: 223542

Committed r163693: <http://trac.webkit.org/changeset/163693>
Comment 3 WebKit Commit Bot 2014-02-07 21:28:12 PST
All reviewed patches have been landed.  Closing bug.