f97e664d8f
Use the Checked type from AK to verify that offset + view_byte_length is buffer_byte_length at most.
6 lines
275 B
JavaScript
6 lines
275 B
JavaScript
test("Issue #13451, integer overflow in offset + view_byte_length", () => {
|
|
const arrayBuffer = new ArrayBuffer(1);
|
|
expect(() => {
|
|
new DataView(arrayBuffer, 1, 1024 * 1024 * 1024 * 4 - 1);
|
|
}).toThrowWithMessage(RangeError, "Invalid DataView length");
|
|
});
|