Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

heap-use-after-free at quickjs.h:661 #3

Closed
kvenux opened this issue Sep 14, 2020 · 1 comment
Closed

heap-use-after-free at quickjs.h:661 #3

kvenux opened this issue Sep 14, 2020 · 1 comment

Comments

@kvenux
Copy link

kvenux commented Sep 14, 2020

Build environment:

Ubuntu 16.04
gcc 5.4.0
qjs version: af1420f(git hash)
test command: ./qjs poc

POC

qjs-000039.txt

Description

Below is the ASAN outputs. Heap use-after-free at QuickJS/quickjs.h:661
image
image
image
@kvenux kvenux mentioned this issue Sep 14, 2020
Closed
@bellard
Copy link
Owner

bellard commented Oct 2, 2020

Already fixed in 2020-09-06 release.

@bellard bellard closed this as completed Oct 2, 2020
@apascovici apascovici mentioned this issue Nov 3, 2020
Closed
GerHobbelt pushed a commit to GerHobbelt/quickjs that referenced this issue May 6, 2022
@github0null
Merge pull request bellard#3 from github0null/dev
4af5c35 
change cicd yml
GerHobbelt pushed a commit to GerHobbelt/quickjs that referenced this issue May 6, 2022
@JerrySievert
Merge pull request bellard#3 from CardinalModules/master
d6008cb 
Fix build against HaikuOS
cykoder pushed a commit to cykoder/quickjs that referenced this issue Sep 1, 2023
@ErosZy
Merge pull request bellard#3 from openwebf/feat/doc_update
12d4b14 
doc: add how to build and test262 steps
GerHobbelt pushed a commit to GerHobbelt/quickjs that referenced this issue Oct 17, 2023
@hsiaosiyuan0
Merge pull request bellard#3 from hsiaosiyuan0/feat/boost
ee98eea 
feat/boost
GerHobbelt pushed a commit to GerHobbelt/quickjs that referenced this issue Oct 17, 2023
@justjake
Merge pull request bellard#3 from justjake/dependabot/npm_and_yarn/jq…
39c8ffe 
…uery-3.5.0

Bump jquery from 3.4.1 to 3.5.0
GerHobbelt pushed a commit to GerHobbelt/quickjs that referenced this issue Oct 17, 2023
@leanmendoza @bsidhom @menduz
feat: BigNum (bellard#3)
eec642c 
* Add vim swapfiles to gitignore

* Use local emcc binary

* Build for emscripten web target

* Enable QuickJS bignum extensions

* Update generated files

* Update README.md

* test

* build

* build

* new package name

Co-authored-by: Ben Sidhom <bsidhom@gmail.com>
Co-authored-by: menduz <github@menduz.com>
GerHobbelt pushed a commit to GerHobbelt/quickjs that referenced this issue Oct 17, 2023
@leanmendoza @bsidhom @menduz
feat: BigNum (bellard#3)
d5cdaa6 
* Add vim swapfiles to gitignore

* Use local emcc binary

* Build for emscripten web target

* Enable QuickJS bignum extensions

* Update generated files

* Update README.md

* test

* build

* build

* new package name

Co-authored-by: Ben Sidhom <bsidhom@gmail.com>
Co-authored-by: menduz <github@menduz.com>
GerHobbelt pushed a commit to GerHobbelt/quickjs that referenced this issue Oct 17, 2023
@menduz @justjake
@dependabot @yar2001 @leanmendoza @bsidhom
update from justjake main (bellard#6)
914bdab 
* 0.23.0

* update changelog for 0.21.1

* Bump qs from 6.5.2 to 6.5.3 (bellard#89)

Bumps [qs](https://github.com/ljharb/qs) from 6.5.2 to 6.5.3.
- [Release notes](https://github.com/ljharb/qs/releases)
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.5.2...v6.5.3)

---
updated-dependencies:
- dependency-name: qs
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump decode-uri-component from 0.2.0 to 0.2.2 (bellard#83)

Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2.
- [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases)
- [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2)

---
updated-dependencies:
- dependency-name: decode-uri-component
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Fix for func_id rollover (bellard#94)

* 32767 functions good, 32768 functions BAD

* change `magic` to uin16_t (avoids signed intereger overflow)

* type magic as uint32_t, add simple test

* re-enable all tests

* remove missed test code

* address PR issues

* switch to a map of maps for fnMap

* update fnId to start at min value

* skip max funcID tests for debug mode

* missed a flag

* run prettier

* Bump http-cache-semantics from 4.1.0 to 4.1.1 (bellard#97)

Bumps [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/kornelski/http-cache-semantics/releases)
- [Commits](kornelski/http-cache-semantics@v4.1.0...v4.1.1)

---
updated-dependencies:
- dependency-name: http-cache-semantics
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* 0.21.2

* scripts/emcc.sh: cache lto .a files in build/emsdk-cache

* unknown change to .map file

* Emit async imports for variants (bellard#100)

* upgrade typescript

* attempt to use nodenext tsc

* revert enabling noUnused{Locals,Parameters}

* fix imports to use real extensions

* update mocha for ESM

* awkward async import issue

* npm run build

* examples/website: update for newer NPM, typescript

* fix behavior for webpack build

* bump emsdk to 3.1.31

* fix function signature

* cache another item

* use EMSDK 3.1.32 native, 3.1.31 in Docker

* add some extra default timeout

* Fix breakage caused by upgrade

* rebuild

* More precise/strict compilation (drop support for node<16)

* rebuild

* add note about MINIMAL_RUNTIME

* tested website

* ?

* pretty

* BigInt (-DCONFIG_BIGNUM) support (bellard#104)

* enable CONFIG_BIGNUM

* recompile for bignum

* bigint basics

* vm.dump for bigint

* fix bigint call

* update changelog

* dump

* Extended Symbol support (bellard#105)

* Symbol utilities

* rebuild

* update CHANGLOG.md

* rebuild docs

* update changelog

* 0.22.0

* Increase ASYNCIFY_STACK_SIZE (bellard#114)

* Increase ASYNCIFY_STACK_SIZE

* Add dynamic asyncify stack size

* update docs & changelog

* rebuild docs

* 0.23.0

* Makefile: use emscripten/emsdk:3.1.35 from docker

* rebuild

* update smoketest

* feat: BigNum (bellard#3)

* Add vim swapfiles to gitignore

* Use local emcc binary

* Build for emscripten web target

* Enable QuickJS bignum extensions

* Update generated files

* Update README.md

* test

* build

* build

* new package name

Co-authored-by: Ben Sidhom <bsidhom@gmail.com>
Co-authored-by: menduz <github@menduz.com>

* feat: add opcode instructions counter (bellard#1)

* add opcode counter

* remove static

* update generated

* fix

* fix prettier

* remove prepack

* feat: move opcode counters to uint64 (bellard#4)

* feat: move the counter to 64bit

* fix test

* increase mocha timeout

* fix prettier

* rebuild

* fix lock

* fix package.json

* prettier

* ignore emsdk-cache in prettier

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Jake Teton-Landis <just.1.jake@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Adam Yost <swimmadude66@users.noreply.github.com>
Co-authored-by: yar2001 <yar2001@163.com>
Co-authored-by: Lean Mendoza <leandro@decentraland.org>
Co-authored-by: Ben Sidhom <bsidhom@gmail.com>
GerHobbelt pushed a commit to GerHobbelt/quickjs that referenced this issue Oct 17, 2023
@kylo5aby
add infc tag (bellard#3)
d4f2223 
* add patch for ts2wasm

* add infc tag
TooTallNate pushed a commit to TooTallNate/quickjs that referenced this issue Dec 18, 2023
@bnoordhuis
ci: add macos build+test workflow (bellard#3)
62f6789
MarkAckert pushed a commit to MarkAckert/quickjs-profiling that referenced this issue Dec 18, 2024
@JoeNemo
Merge pull request bellard#3 from 1000TurquoisePogs/feature/add-opcod…
b4a8e74 
…e-info

Fix for opcode value overlap causing compile fail
# for free to join this conversation on GitHub. Already have an account? # to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@bellard @kvenux