commit | 28cd41e26f60089929a31245f675b852f27edc5e | [log] [tgz] |
---|---|---|
author | Clemens Hammacher <clemensh@chromium.org> | Thu Mar 08 14:39:47 2018 |
committer | Commit Bot <commit-bot@chromium.org> | Mon Mar 12 09:30:03 2018 |
tree | 81dbe03b869faf5d2613fe8425c3d90e1a1b7218 | |
parent | 18d73f2cb64924f79f87ae2c44a4e4c76853112c [diff] |
Merged: [wasm] Avoid integer overflow on function locals check On 32-bit systems, the computation {count + type_list->size()} can overflow, leading to memory corruption later on. R=​ahaas@chromium.org NOTRY=true NOPRESUBMIT=true NOTREECHECKS=true Bug: chromium:819869 Change-Id: I7be8660d25af4ab5a9129b44b24d0820997f3517 Originally-reviewed-on: https://chromium-review.googlesource.com/955025 Reviewed-on: https://chromium-review.googlesource.com/958343 Reviewed-by: Andreas Haas <ahaas@chromium.org> Commit-Queue: Clemens Hammacher <clemensh@chromium.org> Cr-Commit-Position: refs/branch-heads/6.6@{#13} Cr-Branched-From: d500271571b92cb18dcd7b15885b51e8f437d640-refs/heads/6.6.346@{#1} Cr-Branched-From: 265ef0b635f8761df7c89eb4e8ec9c1a6ebee184-refs/heads/master@{#51624}
V8 is Google's open source JavaScript engine.
V8 implements ECMAScript as specified in ECMA-262.
V8 is written in C++ and is used in Google Chrome, the open source browser from Google.
V8 can run standalone, or can be embedded into any C++ application.
V8 Project page: https://github.com/v8/v8/wiki
Checkout depot tools, and run
fetch v8
This will checkout V8 into the directory v8
and fetch all of its dependencies. To stay up to date, run
git pull origin gclient sync
For fetching all branches, add the following into your remote configuration in .git/config
:
fetch = +refs/branch-heads/*:refs/remotes/branch-heads/* fetch = +refs/tags/*:refs/tags/*
Please follow the instructions mentioned on the V8 wiki.