AuroraMiddleware/v8
1
0
Fork 0
Code Issues 2 Pull Requests Releases Wiki Activity

Verify that heap object iterator stays within page bound.

Browse Source 
BUG=

Review URL: https://codereview.chromium.org/823583010

Cr-Commit-Position: refs/heads/master@{#25999}
This commit is contained in:
hpayer 2015-01-08 06:45:14 -08:00 committed by Commit bot
parent 33c81549fb
commit 3783de492f
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/heap/spaces-inl.h
View File

@ -91,6 +91,12 @@ HeapObject* HeapObjectIterator::FromCurrentPage() {
int obj_size = (size_func_ == NULL) ? obj->Size() : size_func_(obj);
cur_addr_ += obj_size;
DCHECK(cur_addr_ <= cur_end_);
// TODO(hpayer): Remove the debugging code.
if (cur_addr_ > cur_end_) {
space_->heap()->isolate()->PushStackTraceAndDie(0xaaaaaaaa, obj, NULL,
obj_size);
}
if (!obj->IsFiller()) {
DCHECK_OBJECT_SIZE(obj_size);
return obj;