Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

17-06 ChakraCore servicing release #3166

Merged
merged 8 commits into from
Jun 15, 2017
Merged

Conversation

jianchun
Copy link

Fixes the following CVEs impacting ChakraCore:

[CVE-2017-0228]
[CVE-2017-8499]
[CVE-2017-8518]
[CVE-2017-8520]
[CVE-2017-8522]
[CVE-2017-8524]
[CVE-2017-8548]

Jianchun Xu and others added 7 commits June 15, 2017 07:49
Update unordered SimpleDictionaryTypeHandler deleted index chain
terminator when growing from small to big index.
…tor when a global let/const property is added and a same-named global getter/setter already exists.
…s inline code to do a bounds check. If the check fails, we convert the source value and jump to the end of the operation. But if the store should bail out on implicit calls, then we need to check for implicit calls caused by the conversion as well as the store itself.
…n-leaf, if necessary, before attempting to reverse the segment linked list
@jianchun
Copy link
Author

@rajatd @pleath @MikeHolman @meg-gupta please review

@rajatd
Copy link
Contributor

rajatd commented Jun 15, 2017

Looks good wrt CVE-2017-0228

@dilijev
Copy link
Contributor

dilijev commented Jun 15, 2017

@MSLaguana @obastemur FYI

@chakrabot chakrabot merged commit 86b66ee into chakra-core:release/1.5 Jun 15, 2017
chakrabot pushed a commit that referenced this pull request Jun 15, 2017
Merge pull request #3166 from jianchun:1706

Fixes the following CVEs impacting ChakraCore:

[CVE-2017-0228]
[CVE-2017-8499]
[CVE-2017-8518]
[CVE-2017-8520]
[CVE-2017-8522]
[CVE-2017-8524]
[CVE-2017-8548]
@jianchun jianchun deleted the 1706 branch June 15, 2017 20:57
chakrabot pushed a commit that referenced this pull request Jun 15, 2017
Merge pull request #3166 from jianchun:1706

Fixes the following CVEs impacting ChakraCore:

[CVE-2017-0228]
[CVE-2017-8499]
[CVE-2017-8518]
[CVE-2017-8520]
[CVE-2017-8522]
[CVE-2017-8524]
[CVE-2017-8548]
chakrabot pushed a commit that referenced this pull request Jun 15, 2017
…cing release

Merge pull request #3166 from jianchun:1706

Fixes the following CVEs impacting ChakraCore:

[CVE-2017-0228]
[CVE-2017-8499]
[CVE-2017-8518]
[CVE-2017-8520]
[CVE-2017-8522]
[CVE-2017-8524]
[CVE-2017-8548]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

9 participants