| commit | b5da57a06de8791693c248b7aafc734861a3785d | [log] [tgz] |
|---|---|---|
| author | Dan Elphick <delphick@chromium.org> | Wed Mar 14 10:02:08 2018 |
| committer | Commit Bot <commit-bot@chromium.org> | Wed Mar 14 11:31:42 2018 |
| tree | 0b728ed5f0f905f1fc098d6c1d8de5d04a3ea80a | |
| parent | 1dab065bb4025bdd663ba12e2e976c34c3fa6599 [diff] |
[builtins] Fix OOB read/write using Array.from Always use the runtime to set the length on an array if it doesn't match the expected length after populating it using Array.from. Bug: chromium:821137 Change-Id: I5a730db58de61ba789040e6dfc815d6067fbae64 Reviewed-on: https://chromium-review.googlesource.com/962222 Reviewed-by: Jakob Gruber <jgruber@chromium.org> Commit-Queue: Dan Elphick <delphick@chromium.org> Cr-Commit-Position: refs/heads/master@{#51919}
V8 is Google's open source JavaScript engine.
V8 implements ECMAScript as specified in ECMA-262.
V8 is written in C++ and is used in Google Chrome, the open source browser from Google.
V8 can run standalone, or can be embedded into any C++ application.
V8 Project page: https://github.com/v8/v8/wiki
Checkout depot tools, and run
fetch v8
This will checkout V8 into the directory v8 and fetch all of its dependencies. To stay up to date, run
git pull origin
gclient sync
For fetching all branches, add the following into your remote configuration in .git/config:
fetch = +refs/branch-heads/*:refs/remotes/branch-heads/*
fetch = +refs/tags/*:refs/tags/*
Please follow the instructions mentioned on the V8 wiki.