projects / platform / upstream / v8.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5b753ce) | patch
Fix forging of object's identity hashes.
authorantonm@chromium.org <antonm@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Thu, 10 Feb 2011 14:09:52 +0000 (14:09 +0000)
committerantonm@chromium.org <antonm@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Thu, 10 Feb 2011 14:09:52 +0000 (14:09 +0000)
commit5d3430a5094a7f55149b4d49f2cac0ce13b785c3
tree91a0d7081e76714db2962dd9701ae63d10f27f33tree | snapshot
parent5b753cecb6ba67a07c049682f8405fd389e235accommit | diff
Fix forging of object's identity hashes.

Do not do standard property lookup on hidden properties object as it might
reach Object.prototype which can be altered to forge identity hashes.
Instead do only local lookup.

Review URL: http://codereview.chromium.org/6472001

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@6728 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/api.cc diff | blob | history
test/cctest/test-api.cc diff | blob | history
Domain: Web Framework / Web Engine;