mirror of
https://github.com/fergalmoran/ladybird.git
synced 2026-01-06 08:36:15 +00:00
AK: Fix accidentally-quadratic behavior in StringBuilder
Found by OSS Fuzz:
#34451 (old bug)
Related commit: 3908a49661
This commit is contained in:
committed by
Linus Groh
parent
7b4dc590e7
commit
2d011961c9
@@ -21,10 +21,11 @@ inline void StringBuilder::will_append(size_t size)
|
||||
Checked<size_t> needed_capacity = m_length;
|
||||
needed_capacity += size;
|
||||
VERIFY(!needed_capacity.has_overflow());
|
||||
if (needed_capacity <= m_buffer.capacity())
|
||||
return;
|
||||
|
||||
Checked<size_t> expanded_capacity = needed_capacity;
|
||||
// Prefer to completely use the inline buffer first
|
||||
if (needed_capacity > inline_capacity)
|
||||
expanded_capacity *= 2;
|
||||
expanded_capacity *= 2;
|
||||
VERIFY(!expanded_capacity.has_overflow());
|
||||
m_buffer.grow(expanded_capacity.value());
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user