commit | 4edcc860546157cb35940663afb9af568595888f | [log] [tgz] |
---|---|---|
author | Simon Zünd <szuend@chromium.org> | Wed Mar 06 10:09:39 2019 |
committer | Commit Bot <commit-bot@chromium.org> | Wed Mar 06 10:55:42 2019 |
tree | fa9ac29f7a5d4e23b1504742786c8896a471811f | |
parent | 43b9277265491ed72db4a84eb5b35600d61bac32 [diff] |
[heap] Throw OOM when allocating FixedDoubleArrays with negative length Bug: chromium:938251 Change-Id: I336765c894cc78ca822904a32356db43feadea07 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1505312 Reviewed-by: Michael Starzinger <mstarzinger@chromium.org> Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Commit-Queue: Simon Zünd <szuend@chromium.org> Cr-Commit-Position: refs/heads/master@{#60051}
V8 is Google's open source JavaScript engine.
V8 implements ECMAScript as specified in ECMA-262.
V8 is written in C++ and is used in Google Chrome, the open source browser from Google.
V8 can run standalone, or can be embedded into any C++ application.
V8 Project page: https://github.com/v8/v8/wiki
Checkout depot tools, and run
fetch v8
This will checkout V8 into the directory v8
and fetch all of its dependencies. To stay up to date, run
git pull origin gclient sync
For fetching all branches, add the following into your remote configuration in .git/config
:
fetch = +refs/branch-heads/*:refs/remotes/branch-heads/* fetch = +refs/tags/*:refs/tags/*
Please follow the instructions mentioned on the V8 wiki.