Zoltan Herczeg d5a635a54a Fix use after free during creation of Promise reactions. (#2532) ...

The ecma_enqueue_promise_reaction_job() function allocates memory,
which might trigger a GC run. During this GC the objects in the
reactions collection are not marked.

Fixes #2486.
Fixes #2506.
Fixes #2541.

JerryScript-DCO-1.0-Signed-off-by: Zoltan Herczeg zherczeg.u-szeged@partner.samsung.com

2018-10-05 08:08:41 +02:00

..

arrow-function.js

Implement arrow function parsing. (#2022)

2017-09-26 10:40:45 +02:00

arrow-this.js

Implement this binding for arrow functions.

2017-10-06 09:07:13 +09:00

class.js

Implement ES2015 class feature (part I.) (#2404)

2018-07-13 01:20:08 +09:00

function-properties.js

Correctly enumerate function property members.

2017-09-05 09:11:35 +09:00

map.js

Implement the core of the map object. (#2447)

2018-09-04 13:30:00 +02:00

object-computed.js

Implement computed properties for object literals. (#2481)

2018-08-28 15:28:16 +02:00

object-getprototypeof.js

Implement the ES2015 version of Object.getPrototypeOf and add a test file for it (#2256)

2018-04-05 14:28:28 +02:00

regression-test-issue-1616.js

Make sure the size arg of alloc will not overflow (#1618)

2017-03-07 08:37:19 +09:00

regression-test-issue-1622.js

Check options in ecma_op_object_get_own_property for typedarray. (#1627)

2017-03-06 19:07:02 +08:00

regression-test-issue-1633.js

Check if propery is not found before delete it. (#1637)

2017-03-06 21:08:30 +08:00

regression-test-issue-1670.js

Implement %TypedArray%.from and fix the issue #1670 (#1679)

2017-03-24 10:37:22 +01:00

regression-test-issue-1763.js

Implement other routines of Promise (#1729)

2017-04-26 19:47:51 +08:00

regression-test-issue-1765.js

Add the class name of promise.prototype (#1766)

2017-04-22 08:34:42 +08:00

regression-test-issue-1881.js

Check if it is object in Promise.prototype.then

2017-06-08 17:08:20 +09:00

regression-test-issue-1936.js

Bugfix: the value in test cases should be invariable (#1939)

2017-07-27 13:37:20 +02:00

regression-test-issue-1995.js

[unix-main] call jerry_run_all_enqueued_jobs before cleanup

2017-09-05 17:43:37 +09:00

regression-test-issue-1996.js

[Promise] check the argc of builtin resolve/reject handler

2017-09-05 18:42:46 +09:00

regression-test-issue-1997.js

[ecma-collection] Check whether the header's first chunk is NULL

2017-09-07 17:42:51 +09:00

regression-test-issue-2107.js

Fix error-free issue in promise

2017-11-21 19:49:44 +09:00

regression-test-issue-2110.js

Add object type checking to instantiation

2017-12-13 18:14:34 +09:00

regression-test-issue-2111.js

Fix bug in promise resolve handler

2017-11-21 14:25:51 +09:00

regression-test-issue-2143.js

[Bugfix]free error in typearray set value routine (#2147)

2017-12-20 12:52:29 +01:00

regression-test-issue-2181.js

Return early if number conversion is failed in arraybuffer slice. (#2184)

2018-02-01 19:30:03 +09:00

regression-test-issue-2414.js

Rework function call. (#2414)

2018-07-11 09:35:44 +09:00

regression-test-issue-2435.js

Fix for null pointer dereference in jmem_heap_free_block (#2440)

2018-08-01 23:09:30 +09:00

regression-test-issue-2465.js

Change Promise properties to internal properties (#2526)

2018-09-24 13:49:41 +02:00

regression-test-issue-2468.js

Change Promise properties to internal properties (#2526)

2018-09-24 13:49:41 +02:00

regression-test-issue-2486.js

Fix use after free during creation of Promise reactions. (#2532)

2018-10-05 08:08:41 +02:00

regression-test-issue-2487.js

Fix ecma_op_object_put return value not being handled (#2514)

2018-09-06 21:05:37 +02:00

regression-test-issue-2488.js

Fix ecma_op_object_put return value not being handled (#2514)

2018-09-06 21:05:37 +02:00

regression-test-issue-2489-original.js

Change Promise properties to internal properties (#2526)

2018-09-24 13:49:41 +02:00

regression-test-issue-2490.js

Change Promise properties to internal properties (#2526)

2018-09-24 13:49:41 +02:00

regression-test-issue-2528.js

Fix ecma_op_function_list_lazy_property_names in case of arrow function (#2529)

2018-09-17 13:31:17 +02:00

template_string.js

Implement template literals. (#2025)

2017-09-27 11:24:51 +02:00

typedArray-fill.js

Add %TypedArray%.prototype.fill(value, [ begin [, end ] ]) support. (#2415)

2018-07-03 19:21:14 +09:00

typedArray-join.js

Implement toString and join for TypedArrays. (#2255)

2018-04-19 10:14:34 +02:00

typedArray-set-with-typedArray.js

Support for %TypedArray%.prototype.set(typedArray [, offset]). (#2405)

2018-07-03 15:19:53 +09:00

typedArray-sort.js

Add %TypedArray%.prototype.sort([ compareFunction ]) support. (#2437)

2018-08-22 08:49:12 +02:00

typedArray-stringify.js

Fix JSON.stringify, to allow TypedArray printing (#2242)

2018-03-19 14:12:33 +01:00

typedArray-subarray.js

Add %TypedArray%.prototype.subarray([ begin [, end ] ]) support. (#2410)

2018-06-28 09:41:07 +02:00

typedArray-tostring.js

Implement toString and join for TypedArrays. (#2255)

2018-04-19 10:14:34 +02:00