Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

17-04 ChakraCore servicing release #2834

Merged
merged 2 commits into from Apr 14, 2017
Merged

17-04 ChakraCore servicing release #2834

merged 2 commits into from Apr 14, 2017

Commits on Apr 13, 2017

  1. [CVE-2017-0208] Fix integer overflow in string.repeat 

    When using repeat API on javascript strings, we aren't checking for the upper cap of the length property.
Fix:
Instead of directly setting the length property in the constructor - We are now calling SetLength() - which also checks for the upper cap and throws OOM.
	       i
    @satheeshravi @rajatd
    satheeshravi authored and rajatd committed Apr 13, 2017
    Configuration menu
    Copy the full SHA
    54d6d08 View commit details
    Browse the repository at this point in the history

  2. [CVE-2017-0093] Type confusion in asm.js arguments 

    When calling eval we pass an additional argument to the function. If we've assigned an asm.js function to eval, then we need to remove that additional argument before getting the arguments
    @Cellule @rajatd
    Cellule authored and rajatd committed Apr 13, 2017
    Configuration menu
    Copy the full SHA
    303d997 View commit details
    Browse the repository at this point in the history