eliott/serenity
1
0
Fork 0
mirror of https://github.com/SerenityOS/serenity synced 2026-05-09 08:32:04 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
2dfd236dcd96f40b59aaba91cce16c3b8740efbc
serenity/Userland/Libraries/LibJS/Runtime/BooleanConstructor.cpp
Timothy Flynn 85e313077a LibJS: Do not invoke Cell::vm in constructors before Cell is constructed 
In a subclass of Cell, we cannot use Cell::vm() before the base Cell
object itself is constructed. Use the Realm's VM instead.

This was caught by UBSAN with vptr sanitation enabled.
2022-09-15 09:45:13 +02:00

1.4 KiB
Raw Blame History

View Raw
Reference in New Issue View Git Blame Copy Permalink