2 ms·
Does that imply that WebKit always allocate by power of two and a script cannot read the memory for unrelated allocation between the array length and the neares
by fpoling 9y ago
Does that imply that WebKit always allocate by power of two and a script cannot read the memory for unrelated allocation between the array length and the nearest 2n?
- iainmerrick 9y agoNo, it means attacks are still possible in the memory region just after the buffer, when it's smaller than the next power of two. Not ideal but it's better than nothing.