Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2025-03-09 04:25:38 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bug 771873 part 2 - Assert on addition overflow in nsTArray::RemoveElementsAt; r=bsmedberg

Browse Source
This commit is contained in:
Aryeh Gregor 2012-07-09 11:13:23 +03:00
parent 98c0f7c228
commit c78113906d
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
xpcom/glue/nsTArray.h
View File

@ -928,6 +928,8 @@ public:
void RemoveElementsAt(index_type start, size_type count) {
MOZ_ASSERT(count == 0 || start < Length(), "Invalid start index");
MOZ_ASSERT(start + count <= Length(), "Invalid length");
// Check that the previous assert didn't overflow
MOZ_ASSERT(start <= start + count, "Start index plus length overflows");
DestructRange(start, count);
this->ShiftData(start, count, 0, sizeof(elem_type), MOZ_ALIGNOF(elem_type));
}