commit | a84c4b763ed287f762e4112c73d9fb357605b02c | [log] [tgz] |
---|---|---|
author | Bryan Ferris <[email protected]> | Tue Mar 05 15:05:33 2019 -0800 |
committer | android-build-team Robot <[email protected]> | Wed Mar 13 18:01:12 2019 +0000 |
tree | 2b7d37b4afa7e78a32735e55583fe2ab6297972f | |
parent | f88303717d5ed67e6ba13c7177ebd3aada958caf [diff] |
Fix OOB read in libpac ast-numbering.cc From the upstream patch (https://chromium.googlesource.com/v8/v8.git/+/fbf974e2af0f62b075e62701581099211f83adb6%5E%21/#F0): """ Add missing early-bailouts in ast traversal visitors """ Bug: 117555811 Test: adb shell /data/nativetest/proxy_resolver_v8_unittest/proxy_resolver_v8_unittest Test: gts-tradefed run gts --test \ com.google.android.gts.devicepolicy.DeviceOwnerTest#testProxyPacProxyTest \ --module GtsGmscoreHostTestCases Test: PoC from bug report Merged-In: I2e02d994f107e64e4f465b4d8a02d4159a95240e Change-Id: Ia62b5ea79d79400166b7e238be1933c55730612b (cherry picked from commit 8cc1440e71299ca16640b4371adf378d0a61983f)
V8 is Google's open source JavaScript engine.
V8 implements ECMAScript as specified in ECMA-262.
V8 is written in C++ and is used in Google Chrome, the open source browser from Google.
V8 can run standalone, or can be embedded into any C++ application.
V8 Project page: https://github.com/v8/v8/wiki
Checkout depot tools, and run
fetch v8
This will checkout V8 into the directory v8
and fetch all of its dependencies. To stay up to date, run
git pull origin gclient sync
For fetching all branches, add the following into your remote configuration in .git/config
:
fetch = +refs/branch-heads/*:refs/remotes/branch-heads/* fetch = +refs/tags/*:refs/tags/*
Please follow the instructions mentioned on the V8 wiki.