RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-07-26 03:37:43 +00:00
Code Issues Activity Actions

LibJS: Zero out memory in newly allocated Uint8ClampedArray objects

Browse source
This commit is contained in:
Andreas Kling 2020-12-01 17:06:48 +01:00
parent 7c4c706ebe
commit f2c7caf2db
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
Libraries/LibJS/Runtime/Uint8ClampedArray.cpp
View file

@ -28,6 +28,7 @@
#include <LibJS/Runtime/Error.h> #include <LibJS/Runtime/Error.h>
#include <LibJS/Runtime/GlobalObject.h> #include <LibJS/Runtime/GlobalObject.h>
#include <LibJS/Runtime/Uint8ClampedArray.h> #include <LibJS/Runtime/Uint8ClampedArray.h>
#include <string.h>
namespace JS { namespace JS {
@ -42,13 +43,13 @@ Uint8ClampedArray::Uint8ClampedArray(u32 length, Object& prototype)
{ {
auto& vm = this->vm(); auto& vm = this->vm();
define_native_property(vm.names.length, length_getter, nullptr); define_native_property(vm.names.length, length_getter, nullptr);
m_data = new u8[m_length]; m_data = (u8*)calloc(m_length, 1);
} }
Uint8ClampedArray::~Uint8ClampedArray() Uint8ClampedArray::~Uint8ClampedArray()
{ {
ASSERT(m_data); ASSERT(m_data);
delete[] m_data; free(m_data);
m_data = nullptr; m_data = nullptr;
} }