Csaba Osztrogonác de38764e88

Fix heap buffer overflow in Array.prototype.copyWithin (#4211) ...

2nd and 3rd argument evaluation of Array.prototype.copyWithin can change
the length of the array as a side-effect. But ES11 spec says that the
algorithm should use the original length. In this case it could happen
that the underlying buffer should be extended.

Fixes #4204

JerryScript-DCO-1.0-Signed-off-by: Csaba Osztrogonác csaba.osztrogonac@h-lab.eu

2020-09-25 15:06:29 +02:00

..

benchmarks/jerry

Streamline copyright notices across the codebase. (#1473)

2016-12-08 06:39:11 +01:00

debugger

Improve source file handling in jerry-main (#4037)

2020-07-28 10:51:16 +02:00

jerry

Fix heap buffer overflow in Array.prototype.copyWithin (#4211)

2020-09-25 15:06:29 +02:00

unit-core

New jerry_get_symbol_description API function (#4206)

2020-09-21 10:39:38 +02:00

unit-doc

Disable unsupported doctest tests on Windows (#3135)

2019-09-20 11:07:06 +02:00

unit-ext

Fix vera++ rule to find expressions without space after parentheses (#3776)

2020-05-22 14:37:59 +02:00

unit-libm

Implement missing hyperbolic Math functions from ES6 (#3670)

2020-04-21 12:34:38 +02:00

.gitattributes

Make run-tests --jerry-tests --jerry-test-suite work on Windows too (#3260)

2019-11-06 15:12:50 +01:00

hello.js

Streamline copyright notices across the codebase. (#1473)

2016-12-08 06:39:11 +01:00

test262-es6-excludelist.xml

Legacy octal escapes should not be allowed in template strings (#4227)

2020-09-25 10:14:28 +02:00

test262-esnext-excludelist.xml

Fix heap buffer overflow in Array.prototype.copyWithin (#4211)

2020-09-25 15:06:29 +02:00