Randomize the seed used for string hashing. This helps guard against

Randomize the seed used for string hashing.  This helps guard against
CPU-eating DOS attacks against node.js servers.  Based on code from
Bert Belder.  This version only solves the issue for those that compile
V8 themselves or those that do not use snapshots.  A snapshot-based
precompiled V8 will still have predictable string hash codes.
Committed: http://code.google.com/p/v8/source/detail?r=10330

[Vyacheslav Egorov (Chromium), 2012-01-04 14:30:56]

lgtm

http://codereview.chromium.org/9086006/diff/1/src/flag-definitions.h
File src/flag-definitions.h (right):

http://codereview.chromium.org/9086006/diff/1/src/flag-definitions.h#newcode352
src/flag-definitions.h:352: DEFINE_bool(randomize_string_hashes,
Maybe it should be noted that data in the snapshot (if present) will supersede
these flags

http://codereview.chromium.org/9086006/diff/1/src/mips/code-stubs-mips.cc
File src/mips/code-stubs-mips.cc (left):

http://codereview.chromium.org/9086006/diff/1/src/mips/code-stubs-mips.cc#old...
src/mips/code-stubs-mips.cc:5929: // hash = character + (character << 10);
comment is outdated

http://codereview.chromium.org/9086006/diff/1/src/objects.cc
File src/objects.cc (right):

http://codereview.chromium.org/9086006/diff/1/src/objects.cc#newcode6696
src/objects.cc:6696: #endif
I think this should be checked only when slow assertions are enabled.

[Erik Corry, 2012-01-04 15:48:59]

http://codereview.chromium.org/9086006/diff/1/src/flag-definitions.h
File src/flag-definitions.h (right):

http://codereview.chromium.org/9086006/diff/1/src/flag-definitions.h#newcode352
src/flag-definitions.h:352: DEFINE_bool(randomize_string_hashes,
On 2012/01/04 14:30:57, Vyacheslav Egorov wrote:
> Maybe it should be noted that data in the snapshot (if present) will supersede
> these flags

Done.

http://codereview.chromium.org/9086006/diff/1/src/mips/code-stubs-mips.cc
File src/mips/code-stubs-mips.cc (left):

http://codereview.chromium.org/9086006/diff/1/src/mips/code-stubs-mips.cc#old...
src/mips/code-stubs-mips.cc:5929: // hash = character + (character << 10);
On 2012/01/04 14:30:57, Vyacheslav Egorov wrote:
> comment is outdated

Done.

http://codereview.chromium.org/9086006/diff/1/src/objects.cc
File src/objects.cc (right):

http://codereview.chromium.org/9086006/diff/1/src/objects.cc#newcode6696
src/objects.cc:6696: #endif
On 2012/01/04 14:30:57, Vyacheslav Egorov wrote:
> I think this should be checked only when slow assertions are enabled.

Done.

[ry, 2012-01-04 23:46:56]

Hi Erik, Can you back port this to 3.6?

feel free to use my attempt if it is correct -
https://gist.github.com/d5fcb57e00e1a32475b4

[ry, 2012-01-05 22:33:47]

I talked with Slave a bit today and tried to get the patch working on 3.6 but
it's crashing on many of the tests. This is the patch I'm using -
https://gist.github.com/1567443

for example:

=== release array-constructor ===                                    
Path: mjsunit/array-constructor
Command: /Users/ryan/projects/node-v0.6/deps/v8/d8
/Users/ryan/projects/node-v0.6/deps/v8/test/mjsunit/mjsunit.js
/Users/ryan/projects/node-v0.6/deps/v8/test/mjsunit/array-constructor.js --test
--- CRASHED ---

[ry, 2012-01-05 22:34:27]

On 2012/01/05 22:33:47, ry wrote:
> I talked with Slave 

s/Slave/Slav/ sorry