mirror of
https://github.com/LadybirdBrowser/ladybird.git
synced 2025-01-24 18:24:45 -05:00
2f3ebce7c8
This would previously crash with a heap UAF when storing the result of `yield 1` into `e` on the second `next` call: ```js function* a() { const e = yield 1; } b = a(); b.next(); gc(); b.next(); ``` |
||
---|---|---|
.. | ||
Bytecode | ||
Contrib/Test262 | ||
Heap | ||
Runtime | ||
Tests | ||
AST.cpp | ||
AST.h | ||
CMakeLists.txt | ||
Console.cpp | ||
Console.h | ||
CyclicModule.cpp | ||
CyclicModule.h | ||
Forward.h | ||
Interpreter.cpp | ||
Interpreter.h | ||
Lexer.cpp | ||
Lexer.h | ||
MarkupGenerator.cpp | ||
MarkupGenerator.h | ||
Module.cpp | ||
Module.h | ||
Parser.cpp | ||
Parser.h | ||
ParserError.cpp | ||
ParserError.h | ||
Print.cpp | ||
Print.h | ||
SafeFunction.h | ||
Script.cpp | ||
Script.h | ||
SourceCode.cpp | ||
SourceCode.h | ||
SourceRange.h | ||
SourceTextModule.cpp | ||
SourceTextModule.h | ||
SyntaxHighlighter.cpp | ||
SyntaxHighlighter.h | ||
SyntheticModule.cpp | ||
SyntheticModule.h | ||
Token.cpp | ||
Token.h |