diff options
| -rw-r--r-- | WebCore/dom/Text.cpp | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/WebCore/dom/Text.cpp b/WebCore/dom/Text.cpp index 229fa88..cbf5aa7 100644 --- a/WebCore/dom/Text.cpp +++ b/WebCore/dom/Text.cpp @@ -128,6 +128,8 @@ String Text::wholeText() const continue; const Text* t = static_cast<const Text*>(n); const String& data = t->data(); + if (std::numeric_limits<unsigned>::max() - data.length() < resultLength) + CRASH(); resultLength += data.length(); } UChar* resultData; |