lukechilds/node - node - Gitea: Git with a cup of tea

History

Cristian Cavalli ee09828622 deps: backport 2bd7464 from upstream V8 Original commit message: For global object property cells, we did not check that the map on the previous object is still the same for which we actually optimized. So the optimized code was not in sync with the actual state of the property cell. When loading from such a global object property cell, Crankshaft optimizes away any map checks (based on the stable map assumption), leading to arbitrary memory access in the worst case. TurboFan has the same bug for stores, but is safe on loads because we do appropriate map checks there. However mixing TurboFan and Crankshaft still exposes the bug. R=yangguo@chromium.org BUG=chromium:659475 Review-Url: https://codereview.chromium.org/2444233004 Cr-Commit-Position: refs/heads/master@{#40592} PR-URL: https://github.com/nodejs/node/pull/10169 Reviewed-By: bnoordhuis - Ben Noordhuis <info@bnoordhuis.nl> Reviewed-By: ofrobots - Ali Ijaz Sheikh <ofrobots@google.com>		8 years ago
..
cares	deps: back port OpenBSD fix in c-ares/c-ares	8 years ago
gtest	deps: revert default gtest reporter change	8 years ago
http_parser	deps: update to http-parser 2.7.0	9 years ago
icu-small	deps: update icu-small to include punycode datafiles	9 years ago
npm	deps: upgrade npm to 3.10.9	8 years ago
openssl	crypto: don't build hardware engines	8 years ago
uv	deps: upgrade libuv to 1.9.1	9 years ago
v8	deps: backport 2bd7464 from upstream V8	8 years ago
v8_inspector	inspector: build file cleanup	8 years ago
zlib	build: do not define ZLIB_CONST	8 years ago