|
@David3141593 | |||||
|
I found this entirely by luck. It might be hard to believe, but I was just thinking "I wonder how different renderers will deal with this string". And I picked exactly the right number of characters to hit an off-by-one.
|
||||||
|
||||||
|
Dаvіd Вucһаnаn
@David3141593
|
5. sij |
|
Crash chrome with this one weird string. Text layout engines HATE it!
gist.github.com/DavidBuchanan3…
|
||
|
|
||
|
Dаvіd Вucһаnаn
@David3141593
|
5. sij |
|
crash happens here: github.com/chromium/chrom…
(nothing exciting, just a bounds check assert failure)
|
||
|
|
||