[CVE-2017-0010] asm.js return object with no properties should not va…

…lidate
chakra-core · Mar 16, 2017 · f1a8c50 · f1a8c50
1 parent 70e23dc
commit f1a8c50
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/lib/Runtime/Language/AsmJs.cpp b/lib/Runtime/Language/AsmJs.cpp
@@ -965,6 +965,10 @@ namespace Js
         }
 
         ParseNode* objectElement = ParserWrapper::GetUnaryNode(objNode);
+        if (!objectElement)
+        {
+            return m.Fail(node, _u("Return object must not be empty"));
+        }
         while( objectElement )
         {
             ParseNode* member = nullptr;