Commit 07d81d8e authored by Nate Chapin's avatar Nate Chapin Committed by Commit Bot

Sanitize world id input to TestRunnerForSpecificView::SetIsolatedWorldInfo

Fuzzers might pass in a value that makes us CHECK

Bug: 953402
Change-Id: I27fd7b6f65eb6b16b5ab612525afda11dd2c55fd
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1670113
Auto-Submit: Nate Chapin <japhet@chromium.org>
Commit-Queue: Mike West <mkwst@chromium.org>
Reviewed-by: default avatarMike West <mkwst@chromium.org>
Cr-Commit-Position: refs/heads/master@{#671528}
parent 4435de00
......@@ -36,6 +36,7 @@
#include "gin/wrappable.h"
#include "third_party/blink/public/mojom/frame/find_in_page.mojom.h"
#include "third_party/blink/public/platform/web_data.h"
#include "third_party/blink/public/platform/web_isolated_world_ids.h"
#include "third_party/blink/public/platform/web_isolated_world_info.h"
#include "third_party/blink/public/platform/web_point.h"
#include "third_party/blink/public/platform/web_url.h"
......@@ -625,6 +626,8 @@ void TestRunnerForSpecificView::SetIsolatedWorldInfo(
int world_id,
v8::Local<v8::Value> security_origin,
v8::Local<v8::Value> content_security_policy) {
if (world_id >= blink::IsolatedWorldId::kEmbedderWorldIdLimit)
return;
if (!security_origin->IsString() && !security_origin->IsNull())
return;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment