Paul Leathers 33c0b9763c [CVE-2019-0605] [CVE-2019-0591] 7 anni fa
..
amd64 cf71a962c1 Merge 1809 October Update changes 7 anni fa
arm 7e235c914d [CVE-2018-8465] Chakra - Invalid stack read leads to type confusion - Individual 7 anni fa
arm64 cf71a962c1 Merge 1809 October Update changes 7 anni fa
i386 cf71a962c1 Merge 1809 October Update changes 7 anni fa
AgenPeeps.cpp 8567cfe6c1 update all references to use correct CamelCase file names 10 anni fa
AgenPeeps.h 9ed1b84bd7 Remove some unimplemented functions 8 anni fa
AsmJsJITInfo.cpp d5d87bf217 Implement WebAssemblySharedArrayBuffer + some tests 8 anni fa
AsmJsJITInfo.h d5d87bf217 Implement WebAssemblySharedArrayBuffer + some tests 8 anni fa
Backend.cpp 45284fc840 Fix Legacy-Link and NDK-Compile errors 9 anni fa
Backend.h c36e1cfe7c Remove old unused SHLD lower path 8 anni fa
BackendApi.cpp 748c4aabf0 fix SAL annotation in JitFromEncodedWorkItem 8 anni fa
BackendOpCodeAttrAsmJs.cpp 75f5e8f298 Address CR feedback 8 anni fa
BackendOpCodeAttrAsmJs.h 1a24313bba add inlining support for asm.js/wasm 8 anni fa
BackendOpCodeList.h 3d944dbf77 Remove redundent flags for jsbuiltin. 8 anni fa
BackwardPass.cpp 8264b9bcdb CVE-2018-8624 Edge - Chakra JIT Overflow 7 anni fa
BackwardPass.h cf71a962c1 Merge 1809 October Update changes 7 anni fa
BailOut.cpp f8bdb180c4 [CVE-2018-8359] Edge - Chakra OOB Write on ProxyEntryPointInfo - Internal 7 anni fa
BailOut.h f8bdb180c4 [CVE-2018-8359] Edge - Chakra OOB Write on ProxyEntryPointInfo - Internal 7 anni fa
BailOutKind.h 88155df9e6 Remove Simd.js related code 8 anni fa
CMakeLists.txt 3741b1a94a Refactor field related to JIT'ed code in EntryPointInfo into a separate structure 7 anni fa
CaseNode.cpp c2c0b1117e Merge remote-tracking branch 'remotes/origin/master' into WebAssembly_Stage 9 anni fa
CaseNode.h c2c0b1117e Merge remote-tracking branch 'remotes/origin/master' into WebAssembly_Stage 9 anni fa
Chakra.Backend.vcxproj c0723f4985 Moving RS4 changes to master 7 anni fa
Chakra.Backend.vcxproj.filters c0723f4985 Moving RS4 changes to master 7 anni fa
CodeGenAllocators.cpp dbdc3f8d83 Code Quality: Replace usage of _M_IX86_OR_ARM32 and _M_X64_OR_ARM64 with TARGET_32 and TARGET_64 8 anni fa
CodeGenAllocators.h dbdc3f8d83 Code Quality: Replace usage of _M_IX86_OR_ARM32 and _M_X64_OR_ARM64 with TARGET_32 and TARGET_64 8 anni fa
CodeGenNumberAllocator.cpp ab3e8dd460 PageAllocators refactoring. 7 anni fa
CodeGenNumberAllocator.h c219bc779d fix for number allocator in-thread JIT case 9 anni fa
CodeGenWorkItem.cpp 15df2a6014 [CVE-2019-0640] Bug report for Edge/Chakra: Missing marshalling for Promise result 7 anni fa
CodeGenWorkItem.h bd5477cd72 Fix incorrect length of display name when tracing ETW events for the JIT queue. 7 anni fa
CodeGenWorkItemType.h 47eab483b9 change top-level dir Lib back to lib 10 anni fa
DbCheckPostLower.cpp fa9151ead4 Create new Opnd ListOpnd. Currently available only at lower and after. 8 anni fa
DbCheckPostLower.h 47eab483b9 change top-level dir Lib back to lib 10 anni fa
Debug.cpp 8567cfe6c1 update all references to use correct CamelCase file names 10 anni fa
EhFrame.cpp 4c410fda40 osx: JIT support 9 anni fa
EhFrame.h 960ec9a5a6 JIT: enable JIT on Linux 9 anni fa
EhFrameCFI.inc 960ec9a5a6 JIT: enable JIT on Linux 9 anni fa
EmitBuffer.cpp cf71a962c1 Merge 1809 October Update changes 7 anni fa
EmitBuffer.h cf71a962c1 Merge 1809 October Update changes 7 anni fa
Encoder.cpp d1b9e0ebc5 When deserializing the parser state cache, verify the script code matches the script used to create the cache 7 anni fa
Encoder.h d1b9e0ebc5 When deserializing the parser state cache, verify the script code matches the script used to create the cache 7 anni fa
EquivalentTypeSet.cpp 5abc0e6f6e Enable objtypespec on polymorphic load/stores in inlinees. In the case where a load/store in an inlinee has collected non-equivalent types in its polymorphic inline cache, let work item creation collect ObjTypeSpecFldInfo for the cache anyway. At GlobOpt time, if all upstream types for the given type symbol are found in the ObjTypeSpecFldInfo type set and are equivalent with one another, use the slot index and aux-slotness shared by these types to optimize the load/store and ignore the other types. This requires collecting per-type information at work item creation time instead of settling on one set of information before jitting. 7 anni fa
EquivalentTypeSet.h 5abc0e6f6e Enable objtypespec on polymorphic load/stores in inlinees. In the case where a load/store in an inlinee has collected non-equivalent types in its polymorphic inline cache, let work item creation collect ObjTypeSpecFldInfo for the cache anyway. At GlobOpt time, if all upstream types for the given type symbol are found in the ObjTypeSpecFldInfo type set and are equivalent with one another, use the slot index and aux-slotness shared by these types to optimize the load/store and ignore the other types. This requires collecting per-type information at work item creation time instead of settling on one set of information before jitting. 7 anni fa
ExternalLowerer.h 24a452c328 add profiling for LdElem; support mixed in Br/CmEq fast paths 9 anni fa
FixedFieldInfo.cpp 3b0dd290b6 update after rebase with swb changes 9 anni fa
FixedFieldInfo.h 0c5a9bf28f should 0 initialize FixedFieldInfo data 9 anni fa
FlowGraph.cpp 69a259c8c3 CVE-2018-8629 OOB bug in Edge WIP 7 anni fa
FlowGraph.h 69a259c8c3 CVE-2018-8629 OOB bug in Edge WIP 7 anni fa
Func.cpp beba75a1ae [CVE-2019-0649] Microsoft Chakra JIT server construct Caches array out-of-bounds 7 anni fa
Func.h cf71a962c1 Merge 1809 October Update changes 7 anni fa
FunctionCodeGenJitTimeData.cpp 967d597479 address CR comments 7 anni fa
FunctionCodeGenJitTimeData.h 967d597479 address CR comments 7 anni fa
FunctionJITRuntimeInfo.cpp b7eb685713 basic obj type spec implementation 9 anni fa
FunctionJITRuntimeInfo.h b7eb685713 basic obj type spec implementation 9 anni fa
FunctionJITTimeInfo.cpp b778ca81c7 [CVE-2019-0658] Microsoft Chakra JIT server array out-of-bounds access 7 anni fa
FunctionJITTimeInfo.h f8bdb180c4 [CVE-2018-8359] Edge - Chakra OOB Write on ProxyEntryPointInfo - Internal 7 anni fa
GlobHashTable.h 2d5d5153fa Fix incorrect references in function 7 anni fa
GlobOpt.cpp 53204ee5b7 [CVE-2019-0593] 7 anni fa
GlobOpt.h 53204ee5b7 [CVE-2019-0593] 7 anni fa
GlobOptArrays.cpp 9b36ce832c [CVE-2018-8510] Edge - missing BytecodeUses for IsIn optimization leads to type confusion 7 anni fa
GlobOptArrays.h 2f80dccca3 allow IntConstOpnds for IsIn array optimization 8 anni fa
GlobOptBailOut.cpp 2781608a34 CVE-2018-8556 7 anni fa
GlobOptBlockData.cpp b7700e2074 Don't add compensation code for array values in prepass. OS#17527968 7 anni fa
GlobOptBlockData.h 9e0fe09b81 PRE for multi-level field loads in a loop. 7 anni fa
GlobOptExpr.cpp 8943e332ea CVE-2018-8555 7 anni fa
GlobOptFields.cpp 33c0b9763c [CVE-2019-0605] [CVE-2019-0591] 7 anni fa
GlobOptIntBounds.cpp 8d21cde342 CVE-2018-8583 Edge - Chakra JIT OOB 9 13 leads to RCE 7 anni fa
GlobOptIntBounds.h f12d847c3b fix issue where hoisted bound checks incorrectly calculated range of indexes 7 anni fa
IR.cpp cff87d0935 Address CR comments 7 anni fa
IR.h 1285e1c601 Stricter check for not aggregating bytecode uses across blocks 7 anni fa
IR.inl 0f34963e42 Hoist speculation masking when possible 7 anni fa
IRBaseTypeList.h 47eab483b9 change top-level dir Lib back to lib 10 anni fa
IRBuilder.cpp bdd22d1b6e [CVE-2019-0610] Chakra JIT server EnsureLoopBodyLoadSlot out-of-bounds read&write 7 anni fa
IRBuilder.h 9c8394ff89 Moving HomeObj field out of ScriptFunction 7 anni fa
IRBuilderAsmJs.cpp bdd22d1b6e [CVE-2019-0610] Chakra JIT server EnsureLoopBodyLoadSlot out-of-bounds read&write 7 anni fa
IRBuilderAsmJs.h bdd22d1b6e [CVE-2019-0610] Chakra JIT server EnsureLoopBodyLoadSlot out-of-bounds read&write 7 anni fa
IRType.cpp 07c7bce4df Small data-structure packing cleanup. 8 anni fa
IRType.h 2be54d29e7 Fix for __declspec(selectany) in clang 5.0 8 anni fa
IRTypeList.h 25d29a0511 int64x2 infra 8 anni fa
IRViewer.cpp f7094f31cb Wasm: preserve nan bits 8 anni fa
IRViewer.h cec0e9a84f replace wchar_t/L"..." with char16/_u("...") 10 anni fa
InductionVariable.cpp 4f93a9d8ce JIT: to compile on Linux 9 anni fa
InductionVariable.h e3b673a4d7 Fix build errors using clang on windows with JIT 9 anni fa
Inline.cpp ef75eace57 CVE-2018-8543 7 anni fa
Inline.h 77cebe2256 inline callbacks 7 anni fa
InlineeFrameInfo.cpp a1fc0ae12c Fix field types in InlineeCallInfo. OS #15566165 7 anni fa
InlineeFrameInfo.h a27864395a [CVE-2018-8473] Edge - Chakra: Stack corruption in the presence of nested inlinees 7 anni fa
InliningDecider.cpp cf3ef50623 [CVE-2018-8355] Edge - Chakra: JIT: Type confusion with localeCompare - Google, Inc. 7 anni fa
InliningDecider.h 77cebe2256 inline callbacks 7 anni fa
InliningHeuristics.cpp 66ec420ce6 Refactoring 8 anni fa
InliningHeuristics.h 1a24313bba add inlining support for asm.js/wasm 8 anni fa
IntBounds.cpp 7b201ab597 [1.7>1.8] [MERGE #4226 @leirocks] 17-11 Security Update 8 anni fa
IntBounds.h e3b673a4d7 Fix build errors using clang on windows with JIT 9 anni fa
IntConstMath.cpp 85d42e7229 [CVE-2017-11861] [ChakraCore] Chakra JIT - Incorrect integer overflow check in Lowerer::LowerBoundCheck - Google, Inc. 8 anni fa
IntConstMath.h 85d42e7229 [CVE-2017-11861] [ChakraCore] Chakra JIT - Incorrect integer overflow check in Lowerer::LowerBoundCheck - Google, Inc. 8 anni fa
IntConstantBounds.h 3ab6f3e971 JIT: signed integer overflow and other fixes 9 anni fa
IntOverflowDoesNotMatterRange.h 47eab483b9 change top-level dir Lib back to lib 10 anni fa
InterpreterThunkEmitter.cpp 6464387701 Support disabling interpreter thunks in JSRT 8 anni fa
InterpreterThunkEmitter.h 5a01dd14ab Refactor InterpreterThunkEmitter so OACR can prove array accesses in EncodeInterpreterThunk are safe. 8 anni fa
JITOutput.cpp cf71a962c1 Merge 1809 October Update changes 7 anni fa
JITOutput.h dbdc3f8d83 Code Quality: Replace usage of _M_IX86_OR_ARM32 and _M_X64_OR_ARM64 with TARGET_32 and TARGET_64 8 anni fa
JITRecyclableObject.h fc4c3205bc Add specialized types of Sets and Maps 8 anni fa
JITThunkEmitter.cpp cf71a962c1 Merge 1809 October Update changes 7 anni fa
JITThunkEmitter.h f5d52c2bfb Replace _M_IX86 || TARGET_64 usage with !defined(_M_ARM) 8 anni fa
JITTimeConstructorCache.cpp 7cb51bf4e1 Support polymorphic type checks for objtypespec. For type checks where we have a set of multiple equivalent types, create a property guard that is structured like a polymorphic inline cache, with an underlying array of types indexed by a hash of the type pointer. 7 anni fa
JITTimeConstructorCache.h 6d36a6f737 swb: write barrier annotations 2 9 anni fa
JITTimeFunctionBody.cpp 9c8394ff89 Moving HomeObj field out of ScriptFunction 7 anni fa
JITTimeFunctionBody.h 9c8394ff89 Moving HomeObj field out of ScriptFunction 7 anni fa
JITTimePolymorphicInlineCache.cpp e801a43ab7 swb: a few more unit test verification fixes 9 anni fa
JITTimePolymorphicInlineCache.h f085b410c3 add oopjit PIC support; bug fixes 9 anni fa
JITTimePolymorphicInlineCacheInfo.cpp 6afb76c862 Move an array bounds to a local to satisfy PREfast 8 anni fa
JITTimePolymorphicInlineCacheInfo.h 5bf9247cc4 Fix prefast warnings (except for the TTD ones which might need merge from master?) 9 anni fa
JITTimeProfileInfo.cpp b8920edd22 OS#17384939: avoid race condition when writing callback info IDL 7 anni fa
JITTimeProfileInfo.h 10acdfa7e0 [MERGE #4995 @rajatd] Aggressive Value Transfer in loop prepass 7 anni fa
JITTimeWorkItem.cpp 71822e65a2 Fix usage of Statement Reader in IRBuilderAsmJs to make sure we don't use uninitialized values. 8 anni fa
JITTimeWorkItem.h c16bfa6293 move building body data from WI creation to JIT time 9 anni fa
JITType.cpp b1ce15d224 Add overload of DynamicType::Is for Type*; use where possible 8 anni fa
JITType.h d7483b2feb remove global operator new/delete override 9 anni fa
JITTypeHandler.cpp 6149e11fde Eliminate some redundant aux slot pointer loads. Use objtypespec analysis to do this. Load the aux slot pointer only at type checks and points where the aux slots are reallocated. At optimized load/stores, reuse the aux slot pointer. 8 anni fa
JITTypeHandler.h 6149e11fde Eliminate some redundant aux slot pointer loads. Use objtypespec analysis to do this. Load the aux slot pointer only at type checks and points where the aux slots are reallocated. At optimized load/stores, reuse the aux slot pointer. 8 anni fa
JavascriptNativeOperators.cpp c0723f4985 Moving RS4 changes to master 7 anni fa
JavascriptNativeOperators.h c0723f4985 Moving RS4 changes to master 7 anni fa
JitTransferData.cpp 3741b1a94a Refactor field related to JIT'ed code in EntryPointInfo into a separate structure 7 anni fa
JitTransferData.h 3741b1a94a Refactor field related to JIT'ed code in EntryPointInfo into a separate structure 7 anni fa
JnHelperMethod.cpp cf71a962c1 Merge 1809 October Update changes 7 anni fa
JnHelperMethod.h cf71a962c1 Merge 1809 October Update changes 7 anni fa
JnHelperMethodList.h cf71a962c1 Merge 1809 October Update changes 7 anni fa
Lifetime.h eca08f1ab9 A pass over initialization of Arena-allocated classes 8 anni fa
LinearScan.cpp f8bdb180c4 [CVE-2018-8359] Edge - Chakra OOB Write on ProxyEntryPointInfo - Internal 7 anni fa
LinearScan.h 776c22503b Track bailout restoration based on TypeSpec flag rather than current symbol type 7 anni fa
LinearScanMDShared.h 47eab483b9 change top-level dir Lib back to lib 10 anni fa
Lower.cpp c76da44c27 CVE-2018-8588 7 anni fa
Lower.h 91bb6d68bf [CVE-2018-8372] Edge - Report a type confusion bug in Edge - 360Vulcan 7 anni fa
LowerMDShared.cpp cf71a962c1 Merge 1809 October Update changes 7 anni fa
LowerMDShared.h cf71a962c1 Merge 1809 October Update changes 7 anni fa
LowerMDSharedSimd128.cpp 88155df9e6 Remove Simd.js related code 8 anni fa
NativeCodeData.cpp 2ec42c988d Store length on NativeCodeData for deallocation. 9 anni fa
NativeCodeData.h 2ec42c988d Store length on NativeCodeData for deallocation. 9 anni fa
NativeCodeGenerator.cpp 63ae30a750 [CVE-2018-8390] Edge - Inlining a fixed deferred function can lead to OOB read/write - Internal 7 anni fa
NativeCodeGenerator.h 26833effbb Always use AsmJsDefault entrypoint instead of a wasm deferred parse entry point 7 anni fa
NativeEntryPointData.cpp 15df2a6014 [CVE-2019-0640] Bug report for Edge/Chakra: Missing marshalling for Promise result 7 anni fa
NativeEntryPointData.h 15df2a6014 [CVE-2019-0640] Bug report for Edge/Chakra: Missing marshalling for Promise result 7 anni fa
ObjTypeSpecFldInfo.cpp 30f91acee0 Disable depolymorphication by default pending resolution of issues related to shared inline caches 7 anni fa
ObjTypeSpecFldInfo.h ec0c73891e [MSFT 17535796] On depoloymorphication, write the slot index discovered during GlobOpt into the ObjTypeSpecFldInfo as well as the opnd field. That way it will be copied into the set that supports the runtime equivalence check. 7 anni fa
Opnd.cpp 7cb51bf4e1 Support polymorphic type checks for objtypespec. For type checks where we have a set of multiple equivalent types, create a property guard that is structured like a polymorphic inline cache, with an underlying array of types indexed by a hash of the type pointer. 7 anni fa
Opnd.h 91bb6d68bf [CVE-2018-8372] Edge - Report a type confusion bug in Edge - 360Vulcan 7 anni fa
Opnd.inl fa9151ead4 Create new Opnd ListOpnd. Currently available only at lower and after. 8 anni fa
PDataManager.cpp 15df2a6014 [CVE-2019-0640] Bug report for Edge/Chakra: Missing marshalling for Promise result 7 anni fa
PDataManager.h 47eab483b9 change top-level dir Lib back to lib 10 anni fa
PageAllocatorPool.cpp b4ba1ef180 fix codegen profiler under OOP JIT 7 anni fa
PageAllocatorPool.h 02a02c3a59 Merge from unreleased/rs2 to release/1.4 9 anni fa
Peeps.cpp 5ac01961ee Fix benign UAF in peeps. 8 anni fa
Peeps.h 47eab483b9 change top-level dir Lib back to lib 10 anni fa
PreLowerPeeps.cpp f010010ff3 change FindRegUse to HasSymUse 8 anni fa
PrologEncoder.cpp 1e22644ddf use stack memory for some of the allocation in interpreter thunk emitter 9 anni fa
PrologEncoder.h 1e22644ddf use stack memory for some of the allocation in interpreter thunk emitter 9 anni fa
QueuedFullJitWorkItem.cpp 8567cfe6c1 update all references to use correct CamelCase file names 10 anni fa
QueuedFullJitWorkItem.h 47eab483b9 change top-level dir Lib back to lib 10 anni fa
Region.cpp ef2d1e05ab Fix for prefast warning 8 anni fa
Region.h 82ff317978 Enable globopt for functions with try finally 8 anni fa
SccLiveness.cpp 85b8c12301 [1.8>master] [MERGE #4419 @Penguinwizzard] A pass over initialization of Arena-allocated classes 8 anni fa
SccLiveness.h 8567cfe6c1 update all references to use correct CamelCase file names 10 anni fa
Security.cpp c0723f4985 Moving RS4 changes to master 7 anni fa
Security.h 1c68c73e59 [1.7>1.8] [MERGE #4195 @boingoing] Merge unreleased/rs3 to release/1.7 8 anni fa
ServerScriptContext.cpp b4ba1ef180 fix codegen profiler under OOP JIT 7 anni fa
ServerScriptContext.h b4ba1ef180 fix codegen profiler under OOP JIT 7 anni fa
ServerThreadContext.cpp 4a3ce7bcb9 Don't allocate in pre-reserved section if we had failed to reserve it on jit server init time. OS#15209418 7 anni fa
ServerThreadContext.h 4a3ce7bcb9 Don't allocate in pre-reserved section if we had failed to reserve it on jit server init time. OS#15209418 7 anni fa
SimpleJitProfilingHelpers.cpp c0723f4985 Moving RS4 changes to master 7 anni fa
SimpleJitProfilingHelpers.h da8e8dd10e reinstate LdLen in bytecode with additional profile info 8 anni fa
SimpleLayout.cpp 8567cfe6c1 update all references to use correct CamelCase file names 10 anni fa
SimpleLayout.h 47eab483b9 change top-level dir Lib back to lib 10 anni fa
SwitchIRBuilder.cpp 9dac95679e SwitchOpt determined by AggressiveIntTypeSpec breaks repeated String cases 8 anni fa
SwitchIRBuilder.h 9dac95679e SwitchOpt determined by AggressiveIntTypeSpec breaks repeated String cases 8 anni fa
Sym.cpp 42350a0088 When trying to untag a var, if that var is single def and is an int constant, simply return the IntConstOpnd with no checks. 8 anni fa
Sym.h 75488126f0 Add SymID_Invalid to handle (SymID)-1 7 anni fa
Sym.inl 8e000909fc One pass over GlobOpt.cpp, moving and consting 8 anni fa
SymTable.cpp 6e39312394 Initialize locals 8 anni fa
SymTable.h eca08f1ab9 A pass over initialization of Arena-allocated classes 8 anni fa
TempTracker.cpp cf71a962c1 Merge 1809 October Update changes 7 anni fa
TempTracker.h cec0e9a84f replace wchar_t/L"..." with char16/_u("...") 10 anni fa
ValueInfo.cpp 88155df9e6 Remove Simd.js related code 8 anni fa
ValueInfo.h c0723f4985 Moving RS4 changes to master 7 anni fa
ValueRelativeOffset.cpp 47eab483b9 change top-level dir Lib back to lib 10 anni fa
ValueRelativeOffset.h e3b673a4d7 Fix build errors using clang on windows with JIT 9 anni fa