Skip to content
Permalink
Browse files

CVE-2019-0993

  • Loading branch information...
pleath committed May 15, 2019
1 parent 06a1438 commit 36644ee0d4cc2bc97a3cd49c3540e6eea193182a
Showing with 4 additions and 0 deletions.
  1. +4 −0 lib/Runtime/Language/JavascriptOperators.cpp
@@ -9655,6 +9655,10 @@ using namespace Js;
Var result = CALL_ENTRYPOINT(threadContext, marshalledFunction->GetEntryPoint(), function, CallInfo(flags, 1), thisVar);
result = CrossSite::MarshalVar(requestContext, result);

// Set implicit call flags so we bail out if we're trying to propagate the value forward, e.g., from a compare. Subsequent calls
// to the getter may produce different results.
threadContext->AddImplicitCallFlags(ImplicitCall_Accessor);

return result;
});
}

0 comments on commit 36644ee

Please sign in to comment.
You can’t perform that action at this time.