From 51b880b0383089822f513330cd64f93b54b9f21c Mon Sep 17 00:00:00 2001 From: Andreas Kling Date: Tue, 5 Jan 2021 12:26:23 +0100 Subject: [PATCH] LibJS: Disable ASAN during the conservative GC stack scan This allows the JS fuzzer to survive garbage collection (so we can find more interesting bugs!) Found by oss-fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29266 --- Libraries/LibJS/Heap/Heap.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Libraries/LibJS/Heap/Heap.cpp b/Libraries/LibJS/Heap/Heap.cpp index 099daf4185..8385b8ff1e 100644 --- a/Libraries/LibJS/Heap/Heap.cpp +++ b/Libraries/LibJS/Heap/Heap.cpp @@ -124,7 +124,7 @@ void Heap::gather_roots(HashTable& roots) #endif } -void Heap::gather_conservative_roots(HashTable& roots) +__attribute__((no_sanitize("address"))) void Heap::gather_conservative_roots(HashTable& roots) { FlatPtr dummy;