Code

17-09 ChakraCore servicing release#3729

Code

Merged

chakrabot merged 15 commits intochakra-core:release/1.7chakra-core/ChakraCore:release/1.7from suwc:build/suwc/1709B_1.7suwc/ChakraCore:build/suwc/1709B_1.7Copy head branch name to clipboardSep 14, 2017

+320-111

Commits

Commits on Sep 14, 2017

• [CVE-2017-8752]fix missing bound check in asm.js in case of constant negative index

  

  MikeHolman

  authored and

  Suwei Chen

  committed
  6ed991d

• [CVE-2017-8740] Fix bad byte code gen for 'with'. The original (conservative) fix for this issue relied on marking scopes as containing 'with'. But because block scopes are created lazily, we can m…

  Show description for ec180eb
  

  pleath

  authored and

  Suwei Chen

  committed
  ec180eb

• [CVE-2017-8649] Bytecode tempering mitigation code accidently turned off - Internal

  

  pleath

  authored and

  Suwei Chen

  committed
  599af18

• [CVE-2017-8755] Fail fast if we can't reparse asm.js module after linking failure

  

  Cellule

  authored and

  Suwei Chen

  committed
  210c0b2

• [CVE-2017-8660] Uninitialized local variables

  

  Suwei Chen

  committed
  741481b

• [CVE-2017-11764]Parser::ParseCatch doesn't handle "eval"

  

  Suwei Chen

  committed
  81a3981

• [CVE-2017-8757]RCE on Windows Insider Preview

  

  Suwei Chen

  committed
  2560fed

• [CVE-2017-8751]Type confusion casting undefined with TypeOfPrototypeObjectDictionary type

  

  Suwei Chen

  committed
  8d89409

• [CVE-2017-8739] buffer overread IsMissingItem.

  Show description for ce4148c
  

  akroshg

  authored and

  Suwei Chen

  committed
  ce4148c

• [CVE-2017-8729] incorrect object pattern.

  Show description for ed6dd45
  

  akroshg

  authored and

  Suwei Chen

  committed
  ed6dd45

• [CVE-2017-8753] Array Reverse OOM RCE

  Show description for 234fc79
  

  akroshg

  authored and

  Suwei Chen

  committed
  234fc79

• [CVE-2017-8756] JIT peephole optimization error

  Show description for 1602eb3
  

  Suwei Chen

  committed
  1602eb3

• [CVE-2017-11767] Do not instantiate param scope if only the function expression symbol is captured

  Show description for 33cdbe2
  

  aneeshdk

  authored and

  Suwei Chen

  committed
  33cdbe2

• [CVE-2017-8748] Fix UAF caused by GC during bailout

  Show description for bf1dd0a
  

  Penguinwizzard

  authored and

  Suwei Chen

  committed
  bf1dd0a

• [CVE-2017-8741]: Limit JSON Stringify Loop to Initialized Portion

  Show description for 9870b09
  

  Penguinwizzard

  authored and

  Suwei Chen

  committed
  9870b09