serenity/Userland/Libraries/LibJS/Runtime/StringConstructor.cpp at 2dfd236dcd96f40b59aaba91cce16c3b8740efbc

mirror of https://github.com/SerenityOS/serenity synced 2026-05-09 00:22:43 +02:00

Files

Timothy Flynn 85e313077a LibJS: Do not invoke Cell::vm in constructors before Cell is constructed

In a subclass of Cell, we cannot use Cell::vm() before the base Cell
object itself is constructed. Use the Realm's VM instead.

This was caught by UBSAN with vptr sanitation enabled.

2022-09-15 09:45:13 +02:00

4.7 KiB

Raw Blame History

View Raw

4.7 KiB Raw Blame History

4.7 KiB

Raw Blame History