Status: Accepted
Owner: [email protected]
CC: [email protected],  [email protected]
Labels: Type-Bug Priority-Critical

New issue 3656 by [email protected]: Iterator result map invalidly embedded directly in fullcodegen code.
https://code.google.com/p/v8/issues/detail?id=3656

EmitCreateIteratorResult directly embeds the iterator result map in code. This is invalid because script caching can cause code to be shared across contexts. Results allocated in cached code from a different context will have the wrong prototype. This is will leak Object.prototype from one context in another if they rely on the same script.

Also the code serializer can (obviously) not handle context-dependent maps. Fullcodegen code should never embed context-dependent maps.

--
You received this message because this project is configured to send all issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
--- You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to