RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-05-14 08:34:57 +00:00
Code Issues Activity Actions

AK: Fix accidentally-quadratic behavior in StringBuilder

Browse source 
Found by OSS Fuzz:
#34451 (old bug)

Related commit: 3908a49661
This commit is contained in:
Ben Wiederhake 2021-05-30 13:10:37 +02:00 • committed by Linus Groh
parent 7b4dc590e7
commit 2d011961c9
2 changed files with 6 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

7
AK/StringBuilder.cpp
View file

@ -21,10 +21,11 @@ inline void StringBuilder::will_append(size_t size)
Checked<size_t> needed_capacity = m_length;
needed_capacity += size;
VERIFY(!needed_capacity.has_overflow());
if (needed_capacity <= m_buffer.capacity())
return;
Checked<size_t> expanded_capacity = needed_capacity;
// Prefer to completely use the inline buffer first
if (needed_capacity > inline_capacity)
expanded_capacity *= 2;
expanded_capacity *= 2;
VERIFY(!expanded_capacity.has_overflow());
m_buffer.grow(expanded_capacity.value());
}