mirror of
https://github.com/RGBCube/serenity
synced 2025-05-14 12:05:00 +00:00
f97e664d8f
Use the Checked type from AK to verify that offset + view_byte_length is buffer_byte_length at most.
6 lines
275 B
JavaScript
6 lines
275 B
JavaScript
test("Issue #13451, integer overflow in offset + view_byte_length", () => {
|
|
const arrayBuffer = new ArrayBuffer(1);
|
|
expect(() => {
|
|
new DataView(arrayBuffer, 1, 1024 * 1024 * 1024 * 4 - 1);
|
|
}).toThrowWithMessage(RangeError, "Invalid DataView length");
|
|
});
|