mstarzinger@chromium.org
6b92a71321
v8: back-port fix for CVE-2013-2882
Quoting the CVE:
Google V8, as used in Google Chrome before 28.0.1500.95, allows
remote attackers to cause a denial of service or possibly have
unspecified other impact via vectors that leverage "type confusion."
Likely has zero impact on node.js because it only runs local, trusted
code but let's apply it anyway.
This is a back-port of upstream commit r15665. Original commit log:
Use internal array as API function cache.
R=yangguo@chromium.org
BUG=chromium:260106
TEST=cctest/test-api/Regress260106
Review URL: https://codereview.chromium.org/19159003
Fixes #5973 .
12 years ago
Ben Noordhuis
41fc46e52f
v8: add setVariableValue debugger command
Issue 2399 part 1: In debugger allow modifying local variable values
Issue 2399 part 2: In debugger allow modifying local variable values
Review URL: https://codereview.chromium.org/11415042
Review URL: https://codereview.chromium.org/11412310
This is a back-port of upstream svn commits r13122 and r13202.
12 years ago
Trevor Norris
5d4ac272c7
v8: fix pointer arithmetic undefined behavior
Clang branch release_33 would optimize out a != NULL check because of
some undefined behavior. This is a floating patch as a backport of that
fix.
Committed: http://code.google.com/p/v8/source/detail?r=13570
12 years ago
Timothy J Fontaine
e2385839d7
v8: re-apply floating patches
12 years ago
Timothy J Fontaine
dbe142c4ed
v8: fix GetLocalizedMessage usage
As is the backport of the abort on uncaught exception wouldn't compile
because we it was passing in `this` when it was unnecessary.
12 years ago
Timothy J Fontaine
279361b277
v8: update to 3.14.5.9
12 years ago
Fedor Indutny
55d058e624
v8: cherry-pick 75311294 from upstream
Quote from commit message:
Create a new HandleScope for each JSON-parsed object to avoid
excessive growth.
12 years ago
verwaest@chromium.org
14417fdb3f
v8: Unify kMaxArguments with number of bits used to encode it.
Increase the number of bits by 1 by making Flags unsigned.
BUG=chromium:211741
Review URL: https://chromiumcodereview.appspot.com/12886008
This is a back-port of commits 13964 and 13988 addressing CVE-2013-2632.
12 years ago
Timothy J Fontaine
4432dc8187
v8: move 32 bit heap hint on sunos
Setting the V8 heap at or near 0x20000000 on 32bit sunos only allows
512 MB of heap space, instead on sunos move this to 0x80000000.
Fixes #4010 .
12 years ago
isaacs
51c8b0ede3
V8: Reapply floating patches
12 years ago
isaacs
81c278d58d
V8: Upgrade to 3.14.5.8
12 years ago
Ben Noordhuis
c80bde1781
v8: work around String::WriteAscii segfault
See http://code.google.com/p/v8/issues/detail?id=2493 for details.
This commit reapplies 9668df8
. The issue has been fixed upstream but
reappeared after last night's downgrade to V8 3.14.5 in commit b15a10e
.
Conflicts:
test/simple/test-buffer.js
12 years ago
Ben Noordhuis
03fe7fb55c
v8: reapply floating patches
Reapply floating patches. Special mention: also reapplies 017009f
but
with the extra change of removing DescriptorArray::kTransitionsIndex
from the postmortem metadata generator because said field no longer
exists in V8 3.14.
12 years ago
Ben Noordhuis
b15a10e7a0
deps: downgrade v8 to 3.14.5
V8 3.15 and newer have stability and performance issues. Roll back to
a known-good version.
12 years ago
isaacs
e4a856e0ba
V8: Reapply floating patches
12 years ago
isaacs
0c2e5ec840
V8: Upgrade to 3.15.11.15
12 years ago
Bryan Cantrill
202b5db4ef
v8: loosen artificial mmap constraint
Fixes #4010 .
13 years ago
isaacs
7a2ebce8d8
V8: Reapply floating patches
12 years ago
isaacs
8024252877
V8: Upgrade to 3.15.11.10
12 years ago
Ben Noordhuis
8b0f3ce397
v8: add %p option to --logfile, expands to pid
Useful when you are profiling multiple instances of V8 concurrently.
Submitted upstream: http://code.google.com/p/v8/issues/detail?id=2503
Refs #4617 .
12 years ago
Ben Noordhuis
9668df8b39
v8: work around String::WriteAscii segfault
See http://code.google.com/p/v8/issues/detail?id=2493 for details.
Once the patch lands in upstream V8, this commit can be reverted.
12 years ago
Fedor Indutny
d22bd9e3c4
deps: update v8 to 3.15.11.7
12 years ago
Fedor Indutny
0054264d88
v8: update to 3.15.11.5
12 years ago
Fedor Indutny
7b4d95a976
deps: update v8 to 3.15.11
12 years ago
Ben Noordhuis
a25ebb1997
v8: fix dragonflybsd build
* fix gyp build
* don't require libexecinfo, it's not there
* libpthread doesn't implement sem_timedwait(), fall back to sem_wait()
Upstreamed in https://codereview.chromium.org/11421013/
12 years ago
Ben Noordhuis
1e738c5ef2
build: make python executable configurable
Upstreamed in https://codereview.chromium.org/11418101/
Fixes #4287 .
12 years ago
isaacs
a0ee291566
V8: Reapply patches
13 years ago
isaacs
95c9305874
V8: Upgrade to 3.13.7.4
13 years ago
isaacs
76a6c4bf2e
V8: Reapply patches
13 years ago
isaacs
29d12c7342
V8: Upgrade to 3.11.10.25
13 years ago
mstarzinger@chromium.org
e8b0427be2
v8: make GDBJIT interface compile again
R=ulan@chromium.org
BUG=v8:1804
Review URL: https://codereview.chromium.org/11022007
This is a back-port of upstream commits 12679, 12686 and 12738.
13 years ago
yangguo@chromium.org
9fa953d3e7
v8: use correct timezone information on Solaris
`timezone` variable contains the difference, in seconds, between UTC and
local standard time (see `man 3 localtime` on Solaris).
Call to `tzset` is required to apply contents of `TZ` variable to
`timezone` variable.
BUG=v8:2064
Review URL: https://chromiumcodereview.appspot.com/10967066
Patch from Maciej Małecki <me@mmalecki.com>.
This is a back-port of upstream commit r12802.
13 years ago
Bryan Cantrill
4165f736e6
v8: loosen artificial mmap constraint
Fixes #4010 .
13 years ago
Bryan Cantrill
7bd84de5ed
v8: loosen artificial mmap constraint
Fixes #4010 .
13 years ago
isaacs
3411a03dd1
V8: Upgrade to 3.13.7.1
13 years ago
yangguo@chromium.org
25c2940a08
v8: Relax requirement from VFP3 to VFP2 where possible.
BUG=
TEST=
Review URL: https://chromiumcodereview.appspot.com/10818026
git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@12194 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
13 years ago
Fedor Indutny
052e63f27f
v8: fix semaphore on MacOS
Landed upstream: https://chromiumcodereview.appspot.com/10867009/
13 years ago
Bert Belder
4899116d4b
v8: upgrade to 3.11.10.22
13 years ago
Bert Belder
2d9239359d
v8: upgrade to v3.11.10.19
13 years ago
isaacs
73976b6c9d
v8: Upgrade to 3.11.10.18
13 years ago
isaacs
f4f0daa44d
V8: Upgrade to 3.11.10.17
13 years ago
isaacs
a0a0062d61
v8: upgrade to 3.11.10.15
13 years ago
isaacs
5b5c8b6005
v8: Upgrade to 3.11.10.14
13 years ago
Bert Belder
74872b0dc9
v8: upgrade to version 3.11.10.12
13 years ago
Bert Belder
6b26583e84
v8: upgrade to v3.11.10.10
13 years ago
verwaest@chromium.org
8a6ef65c2c
Fixing bugs in promotion of elements transitions (r1175). - Fixed invalid memory access when reading enum-cache from descriptor array with elements transitions but 0 real descriptors. - Fixed infinite recursion in the intrusive map iterator when visiting elements transitions. - Properly cached non-fastmode elements transitions.
Review URL: https://chromiumcodereview.appspot.com/10565030
git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@11841 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
13 years ago
jkummerow@chromium.org
7282ce9014
Remove unused-but-set variable from objects.cc.
This fixes compilation with newer GCCs.
R=erik.corry@gmail.com
Review URL: https://chromiumcodereview.appspot.com/10568006
git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@11838 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
13 years ago
erik.corry@gmail.com
f94b85db83
Revert part of 11727 as it sometimes tanked V8 benchmark (raytrace) performance for reasons that are not obvious. Now we make objects into fast-case objects when they are made prototypes for other objects, but we do not mark objects that are already fast case with a bit that helps keep them in fast case. Review URL: https://chromiumcodereview.appspot.com/10556004
git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@11831 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
13 years ago
danno@chromium.org
bf682afb98
MIPS: Fix packed-element.js test on ARM with no snap
Port r11826 (5be3568a)
BUG=
TEST=
Review URL: https://chromiumcodereview.appspot.com/10559002
Patch from Akos Palfi <palfia@homejinni.com>.
git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@11840 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
13 years ago
danno@chromium.org
00247d53db
Fix Kraken regression due to optimistic monomorphic element transitions
R=jkummerow@chromium.org
Review URL: https://chromiumcodereview.appspot.com/10539141
git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@11807 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
13 years ago