kmowery / address-leak

1 stars 0 forks source link

P2I Cast in: Source/JavaScriptCore/runtime/JSObject.cpp Line: 124 #112

Open dkohlbre opened 11 years ago

dkohlbre commented 11 years ago

Check the pointer to integer cast in Source/JavaScriptCore/runtime/JSObject.cpp line 124

dkohlbre commented 11 years ago

Line doesn't appear to include a pointer to integer cast?

marcandrysco commented 11 years ago

Butterfly::indexingHeader() calls IndexingHeader::from(this), which performs the reinterpret cast of the input Butterfly class at Source/JavascriptCore/runtime/IndexingHeader.h:79. There are a bunch of reinterpret casts there, and there's a fun comment "This method is here not just because it's handy, but to remind you that the whole point of butterflies is to do evil pointer arithmetic" in Butterfly.h.