ReferenceCountedArray removeRange crash

The documentation for ReferenceCountedArray::removeRange() says If the range extends beyond the bounds of the array, it will be safely clipped to the size of the array. However no clipping is done and it crashes.

TriviallyCopyable::removeElementsInternal ends up getting called and no bounds checking gets done before it calls memmove.

Yep, I’ll get that fixed.

Thanks for reporting.

1 Like

Any status update on this?

1 Like

Thanks, didn’t see that.