lukechilds/node - node - Gitea: Git with a cup of tea

Commit Graph

Author	SHA1	Message	Date
jkummerow@chromium.org	39e2426b20	v8: backport fix for CVE-2013-{6639\|6640} Quoting CVE-2013-6639: The DehoistArrayIndex function in hydrogen-dehoist.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via JavaScript code that sets the value of an array element with a crafted index. Quoting CVE-2013-6640: The DehoistArrayIndex function in hydrogen-dehoist.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service (out-of-bounds read) via JavaScript code that sets a variable to the value of an array element with a crafted index. Like 6b92a7, this is unlikely to affect node.js because it only runs local, trusted code. However, if there exists some module somewhere that populates an array index with remotely provided data this could very well be used to crash a remote server running node. Defense in depth and all. This is a backport of upstream commit r17801. Original commit log: Limit size of dehoistable array indices LOG=Y BUG=chromium:319835,chromium:319860 R=dslomov@chromium.org Review URL: https://codereview.chromium.org/74113002	11 years ago
Ben Noordhuis	3dcc9b93e1	v8: unbreak `make native` build The security fix from commit `6b92a713` also back-ported the test case. Said test case relies on API that is only available in newer versions of V8 and, as a result, broke the `make native` and `make <arch.mode>` builds. This commit reverts that part of the back-port. Fixes the following build error: ../test/cctest/test-api.cc: In function ‘void TestRegress260106()’: ../test/cctest/test-api.cc:17712:34: error: ‘class v8::Context’ has no member named ‘GetIsolate’	11 years ago
mstarzinger@chromium.org	6b92a71321	v8: back-port fix for CVE-2013-2882 Quoting the CVE: Google V8, as used in Google Chrome before 28.0.1500.95, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion." Likely has zero impact on node.js because it only runs local, trusted code but let's apply it anyway. This is a back-port of upstream commit r15665. Original commit log: Use internal array as API function cache. R=yangguo@chromium.org BUG=chromium:260106 TEST=cctest/test-api/Regress260106 Review URL: https://codereview.chromium.org/19159003 Fixes #5973.	11 years ago
Ben Noordhuis	41fc46e52f	v8: add setVariableValue debugger command Issue 2399 part 1: In debugger allow modifying local variable values Issue 2399 part 2: In debugger allow modifying local variable values Review URL: https://codereview.chromium.org/11415042 Review URL: https://codereview.chromium.org/11412310 This is a back-port of upstream svn commits r13122 and r13202.	12 years ago
isaacs	81c278d58d	V8: Upgrade to 3.14.5.8	12 years ago
Ben Noordhuis	b15a10e7a0	deps: downgrade v8 to 3.14.5 V8 3.15 and newer have stability and performance issues. Roll back to a known-good version.	12 years ago
isaacs	0c2e5ec840	V8: Upgrade to 3.15.11.15	12 years ago
isaacs	8024252877	V8: Upgrade to 3.15.11.10	12 years ago
Fedor Indutny	d22bd9e3c4	deps: update v8 to 3.15.11.7	12 years ago
Fedor Indutny	0054264d88	v8: update to 3.15.11.5	12 years ago
Fedor Indutny	7b4d95a976	deps: update v8 to 3.15.11	12 years ago
Ben Noordhuis	1e738c5ef2	build: make python executable configurable Upstreamed in https://codereview.chromium.org/11418101/ Fixes #4287.	12 years ago
isaacs	95c9305874	V8: Upgrade to 3.13.7.4	12 years ago
isaacs	76a6c4bf2e	V8: Reapply patches	12 years ago
isaacs	29d12c7342	V8: Upgrade to 3.11.10.25	12 years ago
isaacs	3411a03dd1	V8: Upgrade to 3.13.7.1	12 years ago
yangguo@chromium.org	25c2940a08	v8: Relax requirement from VFP3 to VFP2 where possible. BUG= TEST= Review URL: https://chromiumcodereview.appspot.com/10818026 git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@12194 ce2b1a6d-e550-0410-aec6-3dcde31c8c00	12 years ago
Fedor Indutny	052e63f27f	v8: fix semaphore on MacOS Landed upstream: https://chromiumcodereview.appspot.com/10867009/	12 years ago
Bert Belder	4899116d4b	v8: upgrade to 3.11.10.22	12 years ago
Bert Belder	2d9239359d	v8: upgrade to v3.11.10.19	12 years ago
isaacs	f4f0daa44d	V8: Upgrade to 3.11.10.17	12 years ago
isaacs	a0a0062d61	v8: upgrade to 3.11.10.15	12 years ago
isaacs	5b5c8b6005	v8: Upgrade to 3.11.10.14	12 years ago
Bert Belder	74872b0dc9	v8: upgrade to version 3.11.10.12	13 years ago
Bert Belder	6b26583e84	v8: upgrade to v3.11.10.10	13 years ago
erik.corry@gmail.com	f94b85db83	Revert part of 11727 as it sometimes tanked V8 benchmark (raytrace) performance for reasons that are not obvious. Now we make objects into fast-case objects when they are made prototypes for other objects, but we do not mark objects that are already fast case with a bit that helps keep them in fast case. Review URL: https://chromiumcodereview.appspot.com/10556004 git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@11831 ce2b1a6d-e550-0410-aec6-3dcde31c8c00	13 years ago
mstarzinger@chromium.org	c231321cd3	Fix assertion for map code cache of shared maps. R=danno@chromium.org TEST=mjsunit/compare-known-objects-slow Review URL: https://chromiumcodereview.appspot.com/10548046 git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@11815 ce2b1a6d-e550-0410-aec6-3dcde31c8c00	13 years ago
mstarzinger@chromium.org	48893af7bb	Fix performance regression caused by r11202. R=erik.corry@gmail.com BUG=v8:2156,v8:2034 TEST=mjsunit/regress/regress-2156,mjsunit/regress/regress-2034 Review URL: https://chromiumcodereview.appspot.com/10539131 git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@11800 ce2b1a6d-e550-0410-aec6-3dcde31c8c00	13 years ago
Bert Belder	50464cd4f4	v8: upgrade to v3.11.10	13 years ago
isaacs	940a6863ea	Roll V8 back to 3.9.24.31	13 years ago
isaacs	46b09e4190	Roll V8 back to 3.10.8.13	13 years ago
isaacs	cbdf3393a2	Upgrade v8 to 3.11.7	13 years ago
isaacs	3f3f958c14	Upgrade V8 to 3.11.1	13 years ago
isaacs	6ed5ef5fe0	Upgrade V8 to 3.9.24.9	13 years ago
lrn@chromium.org	5d69bbfbdb	Fix bug in x64 RegExp detecting start of string. Also add missing MIPS case in regexp tracer. Fixes issues v8:1748 and v8:1746 BUG=v8:1748, v8:1746 TEST=mjsunit/regress/regress-1748.js Review URL: http://codereview.chromium.org/8116001 git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@9504 ce2b1a6d-e550-0410-aec6-3dcde31c8c00	13 years ago
Bert Belder	69ca83f755	Upgrade V8 to 3.6.6.25	13 years ago
isaacs	4b64542fe0	Upgrade V8 to 3.9.24.6	13 years ago
isaacs	e4fc2cbfd3	Upgrade v8 to 3.9.17	13 years ago
isaacs	2e24ded6d2	Upgrade v8 to 3.9.11	13 years ago
isaacs	f4641bd4de	Update v8 to 3.9.9	13 years ago
isaacs	68a0c56a7d	Upgrade V8 to 3.9.5	13 years ago
isaacs	8be699494e	Upgrade V8 to 3.9.2	13 years ago
isaacs	05471f5c2a	Update v8 to 3.8.9	13 years ago
isaacs	40879f33cd	Upgrade V8 to 3.8.8	13 years ago
isaacs	4afc46d7bc	Upgrade V8 to 3.6.6.19	13 years ago
Fedor Indutny	1695332941	Land number collision fix for v8 3.6 by Erik Corry - If V8 snapshots are enabled then the hash is only randomized at build time. --- backport @10366, @10367 and @10402 to 3.6 Add seed to hash of numeric keyed properties. Minor cleanups of numeric seeded hashing patch. Split NumberDictionary into a randomly seeded and an unseeded version. We don't want to randomize the stub cache. Review URL: http://codereview.chromium.org/9190001/	13 years ago
Ryan Dahl	60040a4f36	Upgrade V8 to 3.8.6	13 years ago
Ryan Dahl	8e5674fb5c	Upgrade V8 to 3.8.5	13 years ago
Bert Belder	4a899c9274	Land hash collision fix for V8 3.6 by Erik Corry. - If V8 snapshots are enabled then the hash is only randomized at build time. - Breaks MIPS --- Backport hash collision workaround to 3.6. This is made up of 9956, 10351, 10338 and 10330. This change bakes the string hash key into the snapshot, so it is determined at build time for shapshot configs. Review URL: http://codereview.chromium.org/9124004	13 years ago
Ryan Dahl	557fc396b4	Upgrade V8 to 3.8.4	13 years ago

1 2 3 4

192 Commits (47abdd9c43ae97ed11cb8cc4c770b43043718308)