Bommels05/Mozilla
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Eliminate array overruns that caused spurious crashes for deeply nested documents (bug #8098)

Browse Source 
git-svn-id: svn://10.0.0.236/trunk@38729 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
kipp%netscape.com
1999-07-07 21:53:05 +00:00
parent ee5b1b8baf
commit 20730e5776
6 changed files with 12 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
mozilla/parser/htmlparser/src/nsParserNode.cpp
View File

@@ -130,7 +130,7 @@ nsresult nsCParserNode::QueryInterface(const nsIID& aIID, void** aInstancePtr)
* @return
*/
void nsCParserNode::AddAttribute(CToken* aToken) {
NS_PRECONDITION(mAttributeCount<PRInt32(sizeof(mAttributes)), "Buffer overrun!");
NS_PRECONDITION(mAttributeCount<eMaxAttr, "Buffer overrun!");
NS_PRECONDITION(0!=aToken, "Error: Token shouldn't be null!");
if(mAttributeCount<eMaxAttr) {
@@ -288,7 +288,7 @@ PRInt32 nsCParserNode::GetSourceLineNumber(void) const {
CToken* nsCParserNode::PopAttributeToken()
{
NS_PRECONDITION(mAttributeCount<PRInt32(sizeof(mAttributes)), "Buffer overrun!");
NS_PRECONDITION(mAttributeCount<eMaxAttr, "Buffer overrun!");
if(mAttributeCount > 0) {
CToken* theAttrToken = mAttributes[--mAttributeCount];
mAttributes[mAttributeCount] = nsnull;