If you think a bug might affect users in the 57 release, please set the correct tracking and status flags for Release Management.

Add __sanitizer_annotate_contiguous_container annotations to JS containers

NEW
Unassigned

Status

()

Core
JavaScript Engine
3 years ago
3 years ago

People

(Reporter: Waldo, Unassigned)

Tracking

(Blocks: 1 bug, {sec-want})

Firefox Tracking Flags

(Not tracked)

Details

There's a new sanitizer annotation for use in marking the reserved-but-invalid region of a container's underlying contiguous memory as invalid.  (There are flourishes that make this more performant than flat-out invalidating that memory on every push/pop; I don't know the details.)  We should put this to use in Vector and whatever other classes like it exist.  Not sure offhand about ASAN version requirements, exactly, but we can feature-detect it as needed.
Blocks: 863846
Keywords: sec-want
You need to log in before you can comment on or make changes to this bug.