diff options
| author | mmoroz <mmoroz@chromium.org> | 2016-02-04 16:19:14 -0800 |
|---|---|---|
| committer | Commit bot <commit-bot@chromium.org> | 2016-02-05 00:20:17 +0000 |
| commit | 061aa9a7b651d4e1adf2cbe6348d37d26cbf5d3c (patch) | |
| tree | d97acd97704467a092e4872effe92d985cfed0de | |
| parent | b72dcae8a0f927d181f48507737c6ce5e33e4a0a (diff) | |
| download | chromium_src-061aa9a7b651d4e1adf2cbe6348d37d26cbf5d3c.zip chromium_src-061aa9a7b651d4e1adf2cbe6348d37d26cbf5d3c.tar.gz chromium_src-061aa9a7b651d4e1adf2cbe6348d37d26cbf5d3c.tar.bz2 | |
Change assert to release assert for Deque to prevent out-of-bounds access.
R=inferno@chromium.org, mbarbella@chromium.org, ochang@chromium.org, tkent@chromium.org
BUG=574802
Review URL: https://codereview.chromium.org/1657933004
Cr-Commit-Position: refs/heads/master@{#373676}
| -rw-r--r-- | third_party/WebKit/Source/wtf/Deque.h | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/third_party/WebKit/Source/wtf/Deque.h b/third_party/WebKit/Source/wtf/Deque.h index cd7bc0c..7dd1563 100644 --- a/third_party/WebKit/Source/wtf/Deque.h +++ b/third_party/WebKit/Source/wtf/Deque.h @@ -524,14 +524,14 @@ inline void DequeIteratorBase<T, inlineCapacity, Allocator>::decrement() template <typename T, size_t inlineCapacity, typename Allocator> inline T* DequeIteratorBase<T, inlineCapacity, Allocator>::after() const { - ASSERT(m_index != m_deque->m_end); + RELEASE_ASSERT(m_index != m_deque->m_end); return &m_deque->m_buffer.buffer()[m_index]; } template <typename T, size_t inlineCapacity, typename Allocator> inline T* DequeIteratorBase<T, inlineCapacity, Allocator>::before() const { - ASSERT(m_index != m_deque->m_start); + RELEASE_ASSERT(m_index != m_deque->m_start); if (!m_index) return &m_deque->m_buffer.buffer()[m_deque->m_buffer.capacity() - 1]; return &m_deque->m_buffer.buffer()[m_index - 1]; |