17-06 ChakraCore servicing release#3166
Merged
chakrabot merged 8 commits intochakra-core:release/1.5from jianchun:1706Jun 15, 2017
+155-40
Commits
Commits on Jun 15, 2017
- committedJianchun Xu
[CVE-2017-8524] Force addition of a data slot to the property descriptor when a global let/const property is added and a same-named global getter/setter already exists.
[CVE-2017-8548] In the case of a write to a typed array, the JIT emits inline code to do a bounds check. If the check fails, we convert the source value and jump to the end of the operation. But if…
[CVE-2017-0228] Reallocate the last segment of a sparse array as a non-leaf, if necessary, before attempting to reverse the segment linked list
- authored andMeghana GuptacommittedJianchun Xu
- committedJianchun Xu