Andreas Kling b9ec043b5a LibGC: Add live HeapBlock registry to fix weak container UAF ...

Maintain a HashTable<HeapBlock*> of live heap blocks in the Heap,
updated on block creation and destruction.

Weak containers (WeakMap, WeakSet, WeakRef, FinalizationRegistry)
now check block liveness before accessing cell memory in their
remove_dead_cells() methods. This prevents use-after-free when
blocks have been freed during incremental sweeping.

2026-05-10 10:58:11 +02:00

2.3 KiB

Raw Blame History

View Raw