29243 2015-10-26 11:27:25 +0000 "While sequence[s] is a whitespace character, co..." 2016-02-15 18:49:26 +0000 1 1 1 Unclassified WHATWG MIME unspecified All All RESOLVED FIXED P2 normal Unsorted 1 pyfisch gphemsley mike sideshowbarker+mimespec oldest_to_newest 123948 0 pyfisch 2015-10-26 11:27:25 +0000 https://mimesniff.spec.whatwg.org/#parsing-a-mime-type [[ While sequence[s] is a whitespace character, continuously execute the following steps: Increment s by 1. ]] The loop does not check if `sequence[s]` exists. An invalid media type like ` ` either raises an out-of-bounds error or reads memory outside of `sequence`. All other loops include the check "If sequence[s] is undefined, return undefined.". 125058 1 gphemsley 2016-02-15 18:33:53 +0000 Fixed by PR #2: https://github.com/whatwg/mimesniff/pull/2 125060 2 gphemsley 2016-02-15 18:49:26 +0000 https://github.com/whatwg/mimesniff/commit/0be57a924e1f68233eb756a1f5ae3c6253584419