about summary refs log tree commit diff stats
path: root/lib/quickjs
Commit message (Collapse)AuthorAgeFilesLines
* Fix stack overflow in CVE-2023-31922Nick Vatamaniuc2023-09-231-0/+6
| | | | | | | | | | | | | | | | | | | isArray and proxy isArray can call each other indefinitely in a mutually recursive loop. Add a stack overflow check in the js_proxy_isArray function before calling JS_isArray(ctx, s->target). With ASAN the the poc.js from issue 178: ``` ./qjs ./poc.js InternalError: stack overflow at isArray (native) at <eval> (./poc.js:4) ``` Fix: https://github.com/bellard/quickjs/issues/178
* fix undefined behavior: shift 32 bits for uint32_t in bf_set_uiBo Yao2023-09-231-1/+6
|
* quickjs: add Array.prototype.atbptato2023-09-031-0/+30
|
* Add utf-8 support to libregexpbptato2023-07-041-6/+14
| | | | | | | This allows us to greatly simplify exec(Regex). In particular, we no longer have to convert any line containing non-ascii characters into UTF-16 (which was a significant inefficiency in regex search until now).
* Remove getClassID hackbptato2023-06-272-0/+10
| | | | Add a JS_GetClassID function to QJS instead.
* Working Nim-QuickJS GC integrationbptato2023-06-242-2/+60
| | | | I believe this works correctly. Hopefully I'm not wrong.
* Include QuickJS sources in the repositorybptato2023-06-2216-0/+74804
Taken from txiki.js, so it includes zamofex's top-level await patch.