nickva opened a new pull request, #5629:
URL: https://github.com/apache/couchdb/pull/5629

    * TypedArray.prototype.subarray: fixed the step at which '[[ByteOffset]]' 
is read 
https://github.com/bellard/quickjs/commit/c942978927a2a806517598a22a07c50766b3e125
    * Fixed buffer overflow in `js_bigint_from_string()` 
https://github.com/bellard/quickjs/commit/e1c18befb8ef661d9ee8a34ebc54e545a0214df9
    * Fixed crash in OP_add_loc if the variable is modified in 
`JS_ToPrimitiveFree()` 
https://github.com/bellard/quickjs/commit/1168c215d1daf2765a24d950079b1d5538305417
    * Fixed buffer overflow in `js_bigint_to_string1()` 
https://github.com/bellard/quickjs/commit/9ce544289fe86acdb8fb33e6a425da151438be05
    * Fixed buffer overflow in `TypedArray.prototype.lastIndexOf()` 
https://github.com/bellard/quickjs/commit/c927eca49a326326181a5db12627ffb48f191fe2
    * Avoid side effects in `JS_PrintValue()` which may lead to crashes in 
`print()` and `js_std_promise_rejection_check()` 
https://github.com/bellard/quickjs/commit/4e0d0b7f807816097cd4e15996c5296984dc531b
    * Limit function and regexp bytecode to 1G to avoid buffer overflows (the 
bytecode generators assume that bytecode offsets can fit a 32 bit signed 
integer 
https://github.com/bellard/quickjs/commit/d9ec8f102eb211f0b230a5ec3bf5da59f333e697
    * Adjust lastIndex to leading surrogate when inside a surrogate pair in 
unicode RegExp 
https://github.com/bellard/quickjs/commit/a4ac84d993128ec4cfe2cadcbb0893a2c2565988
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to