Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(36)

Issue 1542583003: [proxies] Limit recursive proxy prototype lookups to 100'000 (Closed)

Created:
5 years ago by Camillo Bruni
Modified:
5 years ago
Reviewers:
Igor Sheludko
CC:
v8-reviews_googlegroups.com
Base URL:
https://chromium.googlesource.com/v8/v8.git@master
Target Ref:
refs/pending/heads/master
Project:
v8
Visibility:
Public.

Description

[proxies] Limit recursive proxy prototype lookups to 100'000 Creating proto-recursive proxies might lead to instanceof while-looping endlessly in Object::HasInPrototypeChain (For traps we already have stack guards in place to prevent stack overflows). We prevent this by limiting the number of proxies we visit in PrototypeIterator to a magic large number. LOG=n BUG=v8:1543 Committed: https://crrev.com/e10fdbed6d8b0ccbb3b4938bf6b3970b01cff2e8 Cr-Commit-Position: refs/heads/master@{#33007}

Patch Set 1 #

Patch Set 2 : properly initialize instance var #

Total comments: 1

Patch Set 3 : adding constant and test #

Unified diffs Side-by-side diffs Delta from patch set Stats (+35 lines, -12 lines) Patch
M src/prototype.h View 1 2 4 chunks +22 lines, -9 lines 0 comments Download
M test/mjsunit/es6/instanceof-proxies.js View 1 2 2 chunks +13 lines, -3 lines 0 comments Download

Messages

Total messages: 24 (14 generated)
commit-bot: I haz the power
Dry run: CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1542583003/1 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/1542583003/1
5 years ago (2015-12-21 13:00:11 UTC) #2
Camillo Bruni
PTAL
5 years ago (2015-12-21 13:00:24 UTC) #4
commit-bot: I haz the power
Dry run: Try jobs failed on following builders: v8_linux_gcc_compile_rel on tryserver.v8 (JOB_FAILED, http://build.chromium.org/p/tryserver.v8/builders/v8_linux_gcc_compile_rel/builds/9963)
5 years ago (2015-12-21 13:10:32 UTC) #6
commit-bot: I haz the power
Dry run: CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1542583003/20001 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/1542583003/20001
5 years ago (2015-12-21 16:34:24 UTC) #9
Igor Sheludko
lgtm with a nit: https://codereview.chromium.org/1542583003/diff/20001/src/prototype.h File src/prototype.h (right): https://codereview.chromium.org/1542583003/diff/20001/src/prototype.h#newcode139 src/prototype.h:139: if (seen_proxies_ > 1000000) { ...
5 years ago (2015-12-21 16:48:12 UTC) #10
commit-bot: I haz the power
Dry run: This issue passed the CQ dry run.
5 years ago (2015-12-21 17:18:09 UTC) #12
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1542583003/40001 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/1542583003/40001
5 years ago (2015-12-22 12:25:46 UTC) #17
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1542583003/40001 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/1542583003/40001
5 years ago (2015-12-22 12:26:36 UTC) #20
commit-bot: I haz the power
Committed patchset #3 (id:40001)
5 years ago (2015-12-22 12:52:04 UTC) #21
commit-bot: I haz the power
5 years ago (2015-12-22 12:53:12 UTC) #23
Message was sent while issue was closed.
Patchset 3 (id:??) landed as
https://crrev.com/e10fdbed6d8b0ccbb3b4938bf6b3970b01cff2e8
Cr-Commit-Position: refs/heads/master@{#33007}

Powered by Google App Engine
This is Rietveld 408576698