RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-05-31 16:18:12 +00:00
Code Issues Activity Actions
serenity/Libraries/LibJS
History
Linus Groh a5bf6cfff9 LibJS: Don't change offset when reconfiguring property in unique shape 
When changing the attributes of an existing property of an object with
unique shape we must not change the PropertyMetadata offset.
Doing so without resizing the underlying storage vector caused an OOB
write crash.

Fixes #3735.
2020-10-10 23:25:00 +02:00
..
Heap LibJS: Use IntrusiveList for Allocator's block lists 2020-10-07 14:07:31 +02:00
Runtime LibJS: Don't change offset when reconfiguring property in unique shape 2020-10-10 23:25:00 +02:00
Tests LibJS: Don't change offset when reconfiguring property in unique shape 2020-10-10 23:25:00 +02:00
AST.cpp LibJS: Fix return statements not working properly in loops 2020-10-08 23:23:55 +02:00
AST.h LibJS: Implement logical assignment operators (&&=, ||=, ??=) 2020-10-05 17:57:26 +02:00
CMakeLists.txt LibJS: Split Heap into per-cell-size allocators 2020-10-06 18:50:47 +02:00
Console.cpp LibJS: Move Console from Interpreter to GlobalObject 2020-09-29 21:15:06 +02:00
Console.h LibJS: Move Console from Interpreter to GlobalObject 2020-09-29 21:15:06 +02:00
Forward.h LibJS: Split Heap into per-cell-size allocators 2020-10-06 18:50:47 +02:00
Interpreter.cpp LibJS: Move "strict mode" state to the call stack 2020-10-04 17:03:33 +02:00
Interpreter.h LibJS: Remove some unused Interpreter member functions 2020-10-04 23:10:07 +02:00
Lexer.cpp LibJS: Implement logical assignment operators (&&=, ||=, ??=) 2020-10-05 17:57:26 +02:00
Lexer.h LibJS: Lex and parse regex literals, add RegExp objects 2020-06-07 19:06:55 +02:00
MarkupGenerator.cpp LibJS: Unify syntax highlighting 2020-10-04 23:41:31 +02:00
MarkupGenerator.h Meta: Add a script check the presence of "#pragma once" in header files 2020-05-29 07:59:45 +02:00
Parser.cpp LibJS: break or continue with nonexistent label is a syntax error 2020-10-08 23:27:16 +02:00
Parser.h LibJS: break or continue with nonexistent label is a syntax error 2020-10-08 23:27:16 +02:00
Token.cpp LibJS: Unify syntax highlighting 2020-10-04 23:41:31 +02:00
Token.h LibJS: Implement logical assignment operators (&&=, ||=, ??=) 2020-10-05 17:57:26 +02:00