Reviewers: dcarney, Jakob,
Message:
PTAL
Description:
Only dynamically perform access checks on the receiver if it's a
JSGlobalProxy.
Proxies up the chain are guaranteed to provide access if we had access to
the
receiver, since otherwise we wouldn't have been able to compile the stub in
the
first place. If the security check would change, the window navigates,
changing
the map of the JSGlobalProxy.
BUG=
Please review this at https://codereview.chromium.org/958843002/
Base URL: https://chromium.googlesource.com/v8/v8.git@master
Affected files (+49, -67 lines):
M src/ic/arm/handler-compiler-arm.cc
M src/ic/arm64/handler-compiler-arm64.cc
M src/ic/ia32/handler-compiler-ia32.cc
M src/ic/x64/handler-compiler-x64.cc
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
