eliott/ladybird
1
0
Fork 0
mirror of https://github.com/LadybirdBrowser/ladybird synced 2026-04-27 18:17:22 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
e29be4eaa82e3868d6bf0f3fab6875a55c455d4e
ladybird/Userland/Libraries/LibJS/Runtime/ArrayConstructor.cpp
Timothy Flynn 85e313077a LibJS: Do not invoke Cell::vm in constructors before Cell is constructed 
In a subclass of Cell, we cannot use Cell::vm() before the base Cell
object itself is constructed. Use the Realm's VM instead.

This was caught by UBSAN with vptr sanitation enabled.
2022-09-15 09:45:13 +02:00

6.9 KiB
Raw Blame History

View Raw
Reference in New Issue View Git Blame Copy Permalink