[1.11>master] [MERGE #6420 @boingoing] ChakraCore Servicing Update fo…

…r 2020.04B Merge pull request #6420 from boingoing:servicing_2004_b ChakraCore Servicing Update for 2020.04B Changes to address the following issues: [CVE-2020-0970] [CVE-2020-0969]
chakra-core · Apr 17, 2020 · cf66462 · cf66462
2 parents c459fea + 473286e
commit cf66462
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/lib/Runtime/Types/PathTypeHandler.cpp b/lib/Runtime/Types/PathTypeHandler.cpp
@@ -2062,6 +2062,16 @@ namespace Js
                 {
                     newSetters = this->UpdateSetterSlots(recycler, oldSetters, oldPathSize, newTypePath->GetPathSize());
                 }
+
+#if ENABLE_FIXED_FIELDS
+#ifdef SUPPORT_FIXED_FIELDS_ON_PATH_TYPES
+                if (PathTypeHandlerBase::FixPropsOnPathTypes())
+                {
+                    Assert(this->HasSingletonInstanceOnlyIfNeeded());
+                    this->GetTypePath()->ClearSingletonInstanceIfSame(instance);
+                }
+#endif
+#endif
             }
             else if (growing)
             {