17-10 Security Update that addresses the following issues in ChakraCore#3917

Merged

chakrabot merged 17 commits intochakra-core:release/1.7from

agarwal-sandeep:1710Fixes

Oct 10, 2017

Commits on Oct 10, 2017

[CVE-2017-11802] Chakra - JIT RegexHelper::StringReplace must call the callback function with updating ImplicitCallFlags.
agarwal-sandeep
committed
[CVE-2017-11799] Edge - Chakra: JIT: Incorrect GenerateBailOut calling patterns.
agarwal-sandeep
committed
[CVE-2017-11809] Edge - Chakra: Accesses to uninitialized pointers in StackScriptFunction::BoxState::Box.
agarwal-sandeep
committed
[CVE-2017-11796] Don't reset envDepths for nested compiled functions

sigatrev
authored and
agarwal-sandeep
committed
[CVE-2017-11806] Remove excess entry point cleanup

sigatrev
authored and
agarwal-sandeep
committed
[CVE-2017-11808] Type confusion in FrameDisplay items may lead to oob read/write

rajatd
authored and
agarwal-sandeep
committed
[CVE-2017-11812] Asm.js: Check if the heap is detached after coercing the return value of a foreign import call.

Cellule
authored and
agarwal-sandeep
committed
[CVE-2017-11807] Prevent redeferral of functions for which we are generating byte code. The FuncInfo holds a reference to the FunctionBody, and redeferral will clean up the FunctionBody and any ent…

pleath
authored and
agarwal-sandeep
committed
[CVE-2017-11805] Disable (re)deferral of the called function in the CrossSite thunk. Allocation happens when the thunk marshals cross-site arguments, and this can result in redeferral, which can ca…

pleath
authored and
agarwal-sandeep
committed
[CVE-2017-11811] Disable switch jump table opt if aggressive int type spec is disabled. We are not able to handle a non-int-type-specialized index operand on a switch table branch (today, it will c…

pleath
authored and
agarwal-sandeep
committed
[CVE-2017-11792] Partially initialized data in chakra JIT leads to OOB read/write in RPC - Internal

MikeHolman
authored and
agarwal-sandeep
committed
[CVE-2017-11797] Invalid memory read of out params on a bailout when array destructuring is used as call arg

akroshg
authored and
agarwal-sandeep
committed
[CVE-2017-11821] Do not pass NewTarget flag on proxy function call trap if not needed

aneeshdk
authored and
agarwal-sandeep
committed
[CVE-2017-11801] Out of bound read on deferred stub - Individual

aneeshdk
authored and
agarwal-sandeep
committed
Updating ChakraCore version to 1.7.3
agarwal-sandeep
committed
Add copyright notice to test case
agarwal-sandeep
committed
Fix ubuntu build break
agarwal-sandeep
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

17-10 Security Update that addresses the following issues in ChakraCore#3917

17-10 Security Update that addresses the following issues in ChakraCore#3917
chakrabot merged 17 commits intochakra-core:release/1.7from
agarwal-sandeep:1710Fixes

Commits on Oct 10, 2017

[CVE-2017-11802] Chakra - JIT RegexHelper::StringReplace must call the callback function with updating ImplicitCallFlags.

[CVE-2017-11799] Edge - Chakra: JIT: Incorrect GenerateBailOut calling patterns.

[CVE-2017-11809] Edge - Chakra: Accesses to uninitialized pointers in StackScriptFunction::BoxState::Box.

[CVE-2017-11796] Don't reset envDepths for nested compiled functions

[CVE-2017-11806] Remove excess entry point cleanup

[CVE-2017-11808] Type confusion in FrameDisplay items may lead to oob read/write

[CVE-2017-11812] Asm.js: Check if the heap is detached after coercing the return value of a foreign import call.

[CVE-2017-11807] Prevent redeferral of functions for which we are generating byte code. The FuncInfo holds a reference to the FunctionBody, and redeferral will clean up the FunctionBody and any ent…

[CVE-2017-11805] Disable (re)deferral of the called function in the CrossSite thunk. Allocation happens when the thunk marshals cross-site arguments, and this can result in redeferral, which can ca…

[CVE-2017-11811] Disable switch jump table opt if aggressive int type spec is disabled. We are not able to handle a non-int-type-specialized index operand on a switch table branch (today, it will c…

[CVE-2017-11792] Partially initialized data in chakra JIT leads to OOB read/write in RPC - Internal

[CVE-2017-11797] Invalid memory read of out params on a bailout when array destructuring is used as call arg

[CVE-2017-11821] Do not pass NewTarget flag on proxy function call trap if not needed

[CVE-2017-11801] Out of bound read on deferred stub - Individual

Updating ChakraCore version to 1.7.3

Add copyright notice to test case

Fix ubuntu build break

17-10 Security Update that addresses the following issues in ChakraCore#3917chakrabot merged 17 commits intochakra-core:release/1.7chakra-core/ChakraCore:release/1.7from agarwal-sandeep:1710Fixesagarwal-sandeep/ChakraCore:1710FixesCopy head branch name to clipboard

Commits

Commits on Oct 10, 2017

17-10 Security Update that addresses the following issues in ChakraCore#3917
chakrabot merged 17 commits intochakra-core:release/1.7from
agarwal-sandeep:1710Fixes