Changeset 5291 in webkit for trunk/JavaScriptCore/kjs/nodes.cpp

Timestamp:

Oct 28, 2003, 2:52:29 PM (22 years ago)

Author:

mjs

Message:

Reviewed by Ken.

• fixed 3413962 - malicious web pages can kill all future JavaScript execution by breaking recursion limit check

• kjs/nodes.cpp: (FunctionCallNode::evaluate): If we're going to return early due to breaking the recursion limit, make sure to lower it again, or it will creep up by one each time it's exceeded.

File:

• trunk/JavaScriptCore/kjs/nodes.cpp (modified) (1 diff)

trunk/JavaScriptCore/kjs/nodes.cpp

@@ -747 +747 @@
   static int depth = 0; // sum of all concurrent interpreters
   if (++depth > KJS_MAX_STACK) {
+    --depth;
     return throwError(exec, RangeError, "Exceeded maximum function call depth calling %s (result of expression %s).", v, expr);
   }