This repository has been archived by the owner on Apr 22, 2023. It is now read-only.
node: crashes on CVE-2013-6668 test case #8070
Labels
Comments
|
Looking... |
richardlau
added a commit
to ibmruntimes/node
that referenced
this issue
Aug 20, 2014
Original commit message:
Fix Hydrogen bounds check elimination
When combining bounds checks, they must all be moved before the first load/store
that they are guarding.
BUG=chromium:344186
LOG=y
R=svenpanne@chromium.org
Review URL: https://codereview.chromium.org/172093002
git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@19475 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
fix nodejs#8070
Port fd80a31 to deps/v8ppc and deps/v8z
richardlau
added a commit
to ibmruntimes/node
that referenced
this issue
Sep 17, 2014
Original commit message:
Fix Hydrogen bounds check elimination
When combining bounds checks, they must all be moved before the first load/store
that they are guarding.
BUG=chromium:344186
LOG=y
R=svenpanne@chromium.org
Review URL: https://codereview.chromium.org/172093002
git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@19475 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
fix nodejs#8070
Port fd80a31 to deps/v8ppc and deps/v8z
richardlau
added a commit
to ibmruntimes/node
that referenced
this issue
Oct 21, 2014
Original commit message:
Fix Hydrogen bounds check elimination
When combining bounds checks, they must all be moved before the first load/store
that they are guarding.
BUG=chromium:344186
LOG=y
R=svenpanne@chromium.org
Review URL: https://codereview.chromium.org/172093002
git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@19475 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
fix nodejs#8070
Port fd80a31 to deps/v8ppc and deps/v8z
mscdex
pushed a commit
to mscdex/node
that referenced
this issue
Dec 25, 2014
Original commit message:
Fix Hydrogen bounds check elimination
When combining bounds checks, they must all be moved before the first load/store
that they are guarding.
BUG=chromium:344186
LOG=y
R=svenpanne@chromium.org
Review URL: https://codereview.chromium.org/172093002
git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@19475 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
fix nodejs#8070
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
One of the Chrome bugs under CVE-2013-6668 is:
https://codereview.chromium.org/172093002
https://code.google.com/p/chromium/issues/detail?id=344186
The test case from the upstream bug crashes the latest node v0.10.30.
The text was updated successfully, but these errors were encountered: