Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: cherry-pick c1700c5 from v8 #32770

Merged
merged 3 commits into from Feb 10, 2022
Merged

chore: cherry-pick c1700c5 from v8 #32770

merged 3 commits into from Feb 10, 2022

Conversation

deermichel
Copy link
Contributor

[regexp] Fix UAF in RegExpMacroAssembler

.. by turning masm_ into a unique_ptr s.t. it's freed after the
NoRootArrayScope which references it.

Fixed: chromium:1252620
Change-Id: I24580c5a96d76a973b2b083e7a76b95f93bb6068
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3185459
Commit-Queue: Jakob Gruber <jgruber@chromium.org>
Commit-Queue: Patrick Thier <pthier@chromium.org>
Auto-Submit: Jakob Gruber <jgruber@chromium.org>
Reviewed-by: Patrick Thier <pthier@chromium.org>
Cr-Commit-Position: refs/heads/main@{#77082}

Notes: Fixed crash in v8 regexp assembler.

@deermichel deermichel added semver/patch backwards-compatible bug fixes backport-check-skip Skip trop's backport validity checking 15-x-y labels Feb 7, 2022
@deermichel deermichel requested a review from a team as a code owner February 7, 2022 15:06
@deermichel
Copy link
Contributor Author

just fyi: this landed in Chr 96, therefore it is fixed in e16 and above

@jkleinsc jkleinsc merged commit 65c9f47 into 15-x-y Feb 10, 2022
@jkleinsc jkleinsc deleted the deermichel/cp-regexp-15 branch February 10, 2022 16:27
@release-clerk
Copy link

release-clerk bot commented Feb 10, 2022

Release Notes Persisted

Fixed crash in v8 regexp assembler.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
15-x-y backport-check-skip Skip trop's backport validity checking semver/patch backwards-compatible bug fixes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants