Closed
Bug 506645
Opened 16 years ago
Closed 16 years ago
nsTypedSelection::AddItem doesn't always null check aOutIndex
Categories
(Core :: DOM: Selection, defect)
Core
DOM: Selection
Tracking
()
RESOLVED
FIXED
People
(Reporter: timeless, Assigned: timeless)
References
(Blocks 1 open bug, )
Details
(Keywords: coverity, crash)
Attachments
(1 file)
|
590 bytes,
patch
|
smaug
:
review+
|
Details | Diff | Splinter Review |
3696 nsTypedSelection::AddItem(nsIRange *aItem, PRInt32 *aOutIndex)
3702 if (aOutIndex)
3703 *aOutIndex = -1;
3709 if (aOutIndex)
3710 *aOutIndex = 0;
3735 if (aOutIndex)
3736 *aOutIndex = startIndex;
3745 if (sameRange) {
3746 *aOutIndex = startIndex;
|
||
Updated•16 years ago
|
Attachment #390914 -
Flags: review?(Olli.Pettay) → review+
Status: ASSIGNED → RESOLVED
Closed: 16 years ago
Resolution: --- → FIXED
|
||
Updated•7 years ago
|
Blocks: coverity-analysis
You need to log in
before you can comment on or make changes to this bug.
Description
•