Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: cherry-pick e76178b896f2 from v8 #30200

Merged
merged 2 commits into from Jul 29, 2021
Merged

Conversation

@ppontes
Copy link
Member

@ppontes ppontes commented Jul 19, 2021

Merged: [JSON] Fix GC issue in BuildJsonObject

We must ensure that the sweeper is not running or has already swept
mutable_double_buffer. Otherwise the GC can add it to the free list.

Change-Id: If0fc7617acdb6690f0567215b78f8728e1643ec0
No-Try: true
No-Presubmit: true
No-Tree-Checks: true
Bug: v8:11837, chromium:1214842
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2993033
Reviewed-by: Michael Lippautz mlippautz@chromium.org
Reviewed-by: Toon Verwaest verwaest@chromium.org
Commit-Queue: Victor Gomes victorgomes@chromium.org
Cr-Commit-Position: refs/branch-heads/9.1@{#75}
Cr-Branched-From: 0e4ac64a8cf298b14034a22f9fe7b085d2cb238d-refs/heads/9.1.269@{#1}
Cr-Branched-From: f565e72d5ba88daae35a59d0f978643e2343e912-refs/heads/master@{#73847}

Notes: Security: backported fix for CVE-2021-30541.

zcbenz
zcbenz approved these changes Jul 29, 2021
@zcbenz zcbenz merged commit e119871 into 11-x-y Jul 29, 2021
14 of 15 checks passed
@zcbenz zcbenz deleted the cherry-pick/11-x-y/v8/e76178b896f2 branch Jul 29, 2021
@release-clerk
Copy link

@release-clerk release-clerk bot commented Jul 29, 2021

Release Notes Persisted

Security: backported fix for CVE-2021-30541.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Linked issues

Successfully merging this pull request may close these issues.

None yet

5 participants