Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(330)

Issue 2158343002: Fix: Don't use Isolate during scope resolution. (Closed)

Created:
4 years, 5 months ago by marja
Modified:
4 years, 5 months ago
Reviewers:
Toon Verwaest, rossberg
CC:
v8-reviews_googlegroups.com
Base URL:
https://chromium.googlesource.com/v8/v8.git@master
Target Ref:
refs/pending/heads/master
Project:
v8
Visibility:
Public.

Description

Fix: Don't use Isolate during scope resolution. Using Isolate is unsafe, because we might parse (and do scope analysis) on a background thread. The illegal access happens when encountering f(arguments) { ... }. Kudos to verwaest@ for finding this bug. R=verwaest@chromium.org, rossberg@chromium.org BUG= Committed: https://crrev.com/1e08974e86d197c631b9961c6a1d190aeefeccc7 Cr-Commit-Position: refs/heads/master@{#37893}

Patch Set 1 #

Total comments: 2

Patch Set 2 : oops #

Patch Set 3 : rebased #

Patch Set 4 : rebased on top of AstValueFactory killing changes #

Patch Set 5 : (streamlined the rebase) #

Unified diffs Side-by-side diffs Delta from patch set Stats (+47 lines, -52 lines) Patch
M src/ast/scopes.h View 1 2 3 4 3 chunks +13 lines, -9 lines 0 comments Download
M src/ast/scopes.cc View 1 2 3 4 15 chunks +28 lines, -38 lines 0 comments Download
M src/parsing/parser.h View 1 2 3 1 chunk +3 lines, -2 lines 0 comments Download
M src/parsing/parser.cc View 1 2 3 1 chunk +3 lines, -3 lines 0 comments Download

Messages

Total messages: 31 (18 generated)
marja
rossberg@, ptal
4 years, 5 months ago (2016-07-19 11:45:15 UTC) #6
Toon Verwaest
lgtm with comment https://codereview.chromium.org/2158343002/diff/1/src/ast/scopes.cc File src/ast/scopes.cc (right): https://codereview.chromium.org/2158343002/diff/1/src/ast/scopes.cc#newcode1411 src/ast/scopes.cc:1411: // !var->IsStackLocal()); We shouldn't leave old ...
4 years, 5 months ago (2016-07-19 11:49:43 UTC) #7
marja
oops, didn't mean to leave these comment around, rossberg@, don't look at this yet :) ...
4 years, 5 months ago (2016-07-19 11:53:08 UTC) #8
Toon Verwaest
lgtm
4 years, 5 months ago (2016-07-19 12:02:37 UTC) #10
marja
Fixed leftover code. Probably that check didn't make sense in the previous state, because Variables ...
4 years, 5 months ago (2016-07-19 12:03:37 UTC) #12
rossberg
Nice! LGTM
4 years, 5 months ago (2016-07-19 12:08:36 UTC) #13
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.org/2158343002/20001
4 years, 5 months ago (2016-07-20 07:48:28 UTC) #17
commit-bot: I haz the power
Try jobs failed on following builders: v8_presubmit on master.tryserver.v8 (JOB_FAILED, http://build.chromium.org/p/tryserver.v8/builders/v8_presubmit/builds/19808)
4 years, 5 months ago (2016-07-20 07:52:39 UTC) #19
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.org/2158343002/40001
4 years, 5 months ago (2016-07-20 08:02:50 UTC) #22
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.org/2158343002/80001
4 years, 5 months ago (2016-07-20 08:30:42 UTC) #26
commit-bot: I haz the power
Committed patchset #5 (id:80001)
4 years, 5 months ago (2016-07-20 08:57:58 UTC) #28
commit-bot: I haz the power
CQ bit was unchecked.
4 years, 5 months ago (2016-07-20 08:58:00 UTC) #29
commit-bot: I haz the power
4 years, 5 months ago (2016-07-20 08:59:00 UTC) #31
Message was sent while issue was closed.
Patchset 5 (id:??) landed as
https://crrev.com/1e08974e86d197c631b9961c6a1d190aeefeccc7
Cr-Commit-Position: refs/heads/master@{#37893}

Powered by Google App Engine
This is Rietveld 408576698