6b3bed1740
isArray and proxy isArray can call each other indefinitely in a mutually recursive loop. Add a stack overflow check in the js_proxy_isArray function before calling `JS_isArray(ctx, s->target)`. Original issue: https://github.com/bellard/quickjs/issues/178 CVE: https://nvd.nist.gov/vuln/detail/CVE-2023-31922 |
||
---|---|---|
.. | ||
bjson.c | ||
microbench.js | ||
test262.patch | ||
test_bigint.js | ||
test_bjson.js | ||
test_builtin.js | ||
test_closure.js | ||
test_language.js | ||
test_loop.js | ||
test_queue_microtask.js | ||
test_std.js | ||
test_worker.js | ||
test_worker_module.js |