Paul Leathers 33c0b9763c [CVE-2019-0605] [CVE-2019-0591] 7 年之前
..
amd64 cf71a962c1 Merge 1809 October Update changes 7 年之前
arm 7e235c914d [CVE-2018-8465] Chakra - Invalid stack read leads to type confusion - Individual 7 年之前
arm64 cf71a962c1 Merge 1809 October Update changes 7 年之前
i386 cf71a962c1 Merge 1809 October Update changes 7 年之前
AgenPeeps.cpp 8567cfe6c1 update all references to use correct CamelCase file names 10 年之前
AgenPeeps.h 9ed1b84bd7 Remove some unimplemented functions 8 年之前
AsmJsJITInfo.cpp d5d87bf217 Implement WebAssemblySharedArrayBuffer + some tests 8 年之前
AsmJsJITInfo.h d5d87bf217 Implement WebAssemblySharedArrayBuffer + some tests 8 年之前
Backend.cpp 45284fc840 Fix Legacy-Link and NDK-Compile errors 9 年之前
Backend.h c36e1cfe7c Remove old unused SHLD lower path 8 年之前
BackendApi.cpp 748c4aabf0 fix SAL annotation in JitFromEncodedWorkItem 8 年之前
BackendOpCodeAttrAsmJs.cpp 75f5e8f298 Address CR feedback 8 年之前
BackendOpCodeAttrAsmJs.h 1a24313bba add inlining support for asm.js/wasm 8 年之前
BackendOpCodeList.h 3d944dbf77 Remove redundent flags for jsbuiltin. 8 年之前
BackwardPass.cpp 8264b9bcdb CVE-2018-8624 Edge - Chakra JIT Overflow 7 年之前
BackwardPass.h cf71a962c1 Merge 1809 October Update changes 7 年之前
BailOut.cpp f8bdb180c4 [CVE-2018-8359] Edge - Chakra OOB Write on ProxyEntryPointInfo - Internal 7 年之前
BailOut.h f8bdb180c4 [CVE-2018-8359] Edge - Chakra OOB Write on ProxyEntryPointInfo - Internal 7 年之前
BailOutKind.h 88155df9e6 Remove Simd.js related code 8 年之前
CMakeLists.txt 3741b1a94a Refactor field related to JIT'ed code in EntryPointInfo into a separate structure 7 年之前
CaseNode.cpp c2c0b1117e Merge remote-tracking branch 'remotes/origin/master' into WebAssembly_Stage 9 年之前
CaseNode.h c2c0b1117e Merge remote-tracking branch 'remotes/origin/master' into WebAssembly_Stage 9 年之前
Chakra.Backend.vcxproj c0723f4985 Moving RS4 changes to master 7 年之前
Chakra.Backend.vcxproj.filters c0723f4985 Moving RS4 changes to master 7 年之前
CodeGenAllocators.cpp dbdc3f8d83 Code Quality: Replace usage of _M_IX86_OR_ARM32 and _M_X64_OR_ARM64 with TARGET_32 and TARGET_64 8 年之前
CodeGenAllocators.h dbdc3f8d83 Code Quality: Replace usage of _M_IX86_OR_ARM32 and _M_X64_OR_ARM64 with TARGET_32 and TARGET_64 8 年之前
CodeGenNumberAllocator.cpp ab3e8dd460 PageAllocators refactoring. 7 年之前
CodeGenNumberAllocator.h c219bc779d fix for number allocator in-thread JIT case 9 年之前
CodeGenWorkItem.cpp 15df2a6014 [CVE-2019-0640] Bug report for Edge/Chakra: Missing marshalling for Promise result 7 年之前
CodeGenWorkItem.h bd5477cd72 Fix incorrect length of display name when tracing ETW events for the JIT queue. 7 年之前
CodeGenWorkItemType.h 47eab483b9 change top-level dir Lib back to lib 10 年之前
DbCheckPostLower.cpp fa9151ead4 Create new Opnd ListOpnd. Currently available only at lower and after. 8 年之前
DbCheckPostLower.h 47eab483b9 change top-level dir Lib back to lib 10 年之前
Debug.cpp 8567cfe6c1 update all references to use correct CamelCase file names 10 年之前
EhFrame.cpp 4c410fda40 osx: JIT support 9 年之前
EhFrame.h 960ec9a5a6 JIT: enable JIT on Linux 9 年之前
EhFrameCFI.inc 960ec9a5a6 JIT: enable JIT on Linux 9 年之前
EmitBuffer.cpp cf71a962c1 Merge 1809 October Update changes 7 年之前
EmitBuffer.h cf71a962c1 Merge 1809 October Update changes 7 年之前
Encoder.cpp d1b9e0ebc5 When deserializing the parser state cache, verify the script code matches the script used to create the cache 7 年之前
Encoder.h d1b9e0ebc5 When deserializing the parser state cache, verify the script code matches the script used to create the cache 7 年之前
EquivalentTypeSet.cpp 5abc0e6f6e Enable objtypespec on polymorphic load/stores in inlinees. In the case where a load/store in an inlinee has collected non-equivalent types in its polymorphic inline cache, let work item creation collect ObjTypeSpecFldInfo for the cache anyway. At GlobOpt time, if all upstream types for the given type symbol are found in the ObjTypeSpecFldInfo type set and are equivalent with one another, use the slot index and aux-slotness shared by these types to optimize the load/store and ignore the other types. This requires collecting per-type information at work item creation time instead of settling on one set of information before jitting. 7 年之前
EquivalentTypeSet.h 5abc0e6f6e Enable objtypespec on polymorphic load/stores in inlinees. In the case where a load/store in an inlinee has collected non-equivalent types in its polymorphic inline cache, let work item creation collect ObjTypeSpecFldInfo for the cache anyway. At GlobOpt time, if all upstream types for the given type symbol are found in the ObjTypeSpecFldInfo type set and are equivalent with one another, use the slot index and aux-slotness shared by these types to optimize the load/store and ignore the other types. This requires collecting per-type information at work item creation time instead of settling on one set of information before jitting. 7 年之前
ExternalLowerer.h 24a452c328 add profiling for LdElem; support mixed in Br/CmEq fast paths 9 年之前
FixedFieldInfo.cpp 3b0dd290b6 update after rebase with swb changes 9 年之前
FixedFieldInfo.h 0c5a9bf28f should 0 initialize FixedFieldInfo data 9 年之前
FlowGraph.cpp 69a259c8c3 CVE-2018-8629 OOB bug in Edge WIP 7 年之前
FlowGraph.h 69a259c8c3 CVE-2018-8629 OOB bug in Edge WIP 7 年之前
Func.cpp beba75a1ae [CVE-2019-0649] Microsoft Chakra JIT server construct Caches array out-of-bounds 7 年之前
Func.h cf71a962c1 Merge 1809 October Update changes 7 年之前
FunctionCodeGenJitTimeData.cpp 967d597479 address CR comments 7 年之前
FunctionCodeGenJitTimeData.h 967d597479 address CR comments 7 年之前
FunctionJITRuntimeInfo.cpp b7eb685713 basic obj type spec implementation 9 年之前
FunctionJITRuntimeInfo.h b7eb685713 basic obj type spec implementation 9 年之前
FunctionJITTimeInfo.cpp b778ca81c7 [CVE-2019-0658] Microsoft Chakra JIT server array out-of-bounds access 7 年之前
FunctionJITTimeInfo.h f8bdb180c4 [CVE-2018-8359] Edge - Chakra OOB Write on ProxyEntryPointInfo - Internal 7 年之前
GlobHashTable.h 2d5d5153fa Fix incorrect references in function 7 年之前
GlobOpt.cpp 53204ee5b7 [CVE-2019-0593] 7 年之前
GlobOpt.h 53204ee5b7 [CVE-2019-0593] 7 年之前
GlobOptArrays.cpp 9b36ce832c [CVE-2018-8510] Edge - missing BytecodeUses for IsIn optimization leads to type confusion 7 年之前
GlobOptArrays.h 2f80dccca3 allow IntConstOpnds for IsIn array optimization 8 年之前
GlobOptBailOut.cpp 2781608a34 CVE-2018-8556 7 年之前
GlobOptBlockData.cpp b7700e2074 Don't add compensation code for array values in prepass. OS#17527968 7 年之前
GlobOptBlockData.h 9e0fe09b81 PRE for multi-level field loads in a loop. 7 年之前
GlobOptExpr.cpp 8943e332ea CVE-2018-8555 7 年之前
GlobOptFields.cpp 33c0b9763c [CVE-2019-0605] [CVE-2019-0591] 7 年之前
GlobOptIntBounds.cpp 8d21cde342 CVE-2018-8583 Edge - Chakra JIT OOB 9 13 leads to RCE 7 年之前
GlobOptIntBounds.h f12d847c3b fix issue where hoisted bound checks incorrectly calculated range of indexes 7 年之前
IR.cpp cff87d0935 Address CR comments 7 年之前
IR.h 1285e1c601 Stricter check for not aggregating bytecode uses across blocks 7 年之前
IR.inl 0f34963e42 Hoist speculation masking when possible 7 年之前
IRBaseTypeList.h 47eab483b9 change top-level dir Lib back to lib 10 年之前
IRBuilder.cpp bdd22d1b6e [CVE-2019-0610] Chakra JIT server EnsureLoopBodyLoadSlot out-of-bounds read&write 7 年之前
IRBuilder.h 9c8394ff89 Moving HomeObj field out of ScriptFunction 7 年之前
IRBuilderAsmJs.cpp bdd22d1b6e [CVE-2019-0610] Chakra JIT server EnsureLoopBodyLoadSlot out-of-bounds read&write 7 年之前
IRBuilderAsmJs.h bdd22d1b6e [CVE-2019-0610] Chakra JIT server EnsureLoopBodyLoadSlot out-of-bounds read&write 7 年之前
IRType.cpp 07c7bce4df Small data-structure packing cleanup. 8 年之前
IRType.h 2be54d29e7 Fix for __declspec(selectany) in clang 5.0 8 年之前
IRTypeList.h 25d29a0511 int64x2 infra 8 年之前
IRViewer.cpp f7094f31cb Wasm: preserve nan bits 8 年之前
IRViewer.h cec0e9a84f replace wchar_t/L"..." with char16/_u("...") 10 年之前
InductionVariable.cpp 4f93a9d8ce JIT: to compile on Linux 9 年之前
InductionVariable.h e3b673a4d7 Fix build errors using clang on windows with JIT 9 年之前
Inline.cpp ef75eace57 CVE-2018-8543 7 年之前
Inline.h 77cebe2256 inline callbacks 7 年之前
InlineeFrameInfo.cpp a1fc0ae12c Fix field types in InlineeCallInfo. OS #15566165 7 年之前
InlineeFrameInfo.h a27864395a [CVE-2018-8473] Edge - Chakra: Stack corruption in the presence of nested inlinees 7 年之前
InliningDecider.cpp cf3ef50623 [CVE-2018-8355] Edge - Chakra: JIT: Type confusion with localeCompare - Google, Inc. 7 年之前
InliningDecider.h 77cebe2256 inline callbacks 7 年之前
InliningHeuristics.cpp 66ec420ce6 Refactoring 8 年之前
InliningHeuristics.h 1a24313bba add inlining support for asm.js/wasm 8 年之前
IntBounds.cpp 7b201ab597 [1.7>1.8] [MERGE #4226 @leirocks] 17-11 Security Update 8 年之前
IntBounds.h e3b673a4d7 Fix build errors using clang on windows with JIT 9 年之前
IntConstMath.cpp 85d42e7229 [CVE-2017-11861] [ChakraCore] Chakra JIT - Incorrect integer overflow check in Lowerer::LowerBoundCheck - Google, Inc. 8 年之前
IntConstMath.h 85d42e7229 [CVE-2017-11861] [ChakraCore] Chakra JIT - Incorrect integer overflow check in Lowerer::LowerBoundCheck - Google, Inc. 8 年之前
IntConstantBounds.h 3ab6f3e971 JIT: signed integer overflow and other fixes 9 年之前
IntOverflowDoesNotMatterRange.h 47eab483b9 change top-level dir Lib back to lib 10 年之前
InterpreterThunkEmitter.cpp 6464387701 Support disabling interpreter thunks in JSRT 8 年之前
InterpreterThunkEmitter.h 5a01dd14ab Refactor InterpreterThunkEmitter so OACR can prove array accesses in EncodeInterpreterThunk are safe. 8 年之前
JITOutput.cpp cf71a962c1 Merge 1809 October Update changes 7 年之前
JITOutput.h dbdc3f8d83 Code Quality: Replace usage of _M_IX86_OR_ARM32 and _M_X64_OR_ARM64 with TARGET_32 and TARGET_64 8 年之前
JITRecyclableObject.h fc4c3205bc Add specialized types of Sets and Maps 8 年之前
JITThunkEmitter.cpp cf71a962c1 Merge 1809 October Update changes 7 年之前
JITThunkEmitter.h f5d52c2bfb Replace _M_IX86 || TARGET_64 usage with !defined(_M_ARM) 8 年之前
JITTimeConstructorCache.cpp 7cb51bf4e1 Support polymorphic type checks for objtypespec. For type checks where we have a set of multiple equivalent types, create a property guard that is structured like a polymorphic inline cache, with an underlying array of types indexed by a hash of the type pointer. 7 年之前
JITTimeConstructorCache.h 6d36a6f737 swb: write barrier annotations 2 9 年之前
JITTimeFunctionBody.cpp 9c8394ff89 Moving HomeObj field out of ScriptFunction 7 年之前
JITTimeFunctionBody.h 9c8394ff89 Moving HomeObj field out of ScriptFunction 7 年之前
JITTimePolymorphicInlineCache.cpp e801a43ab7 swb: a few more unit test verification fixes 9 年之前
JITTimePolymorphicInlineCache.h f085b410c3 add oopjit PIC support; bug fixes 9 年之前
JITTimePolymorphicInlineCacheInfo.cpp 6afb76c862 Move an array bounds to a local to satisfy PREfast 8 年之前
JITTimePolymorphicInlineCacheInfo.h 5bf9247cc4 Fix prefast warnings (except for the TTD ones which might need merge from master?) 9 年之前
JITTimeProfileInfo.cpp b8920edd22 OS#17384939: avoid race condition when writing callback info IDL 7 年之前
JITTimeProfileInfo.h 10acdfa7e0 [MERGE #4995 @rajatd] Aggressive Value Transfer in loop prepass 7 年之前
JITTimeWorkItem.cpp 71822e65a2 Fix usage of Statement Reader in IRBuilderAsmJs to make sure we don't use uninitialized values. 8 年之前
JITTimeWorkItem.h c16bfa6293 move building body data from WI creation to JIT time 9 年之前
JITType.cpp b1ce15d224 Add overload of DynamicType::Is for Type*; use where possible 8 年之前
JITType.h d7483b2feb remove global operator new/delete override 9 年之前
JITTypeHandler.cpp 6149e11fde Eliminate some redundant aux slot pointer loads. Use objtypespec analysis to do this. Load the aux slot pointer only at type checks and points where the aux slots are reallocated. At optimized load/stores, reuse the aux slot pointer. 8 年之前
JITTypeHandler.h 6149e11fde Eliminate some redundant aux slot pointer loads. Use objtypespec analysis to do this. Load the aux slot pointer only at type checks and points where the aux slots are reallocated. At optimized load/stores, reuse the aux slot pointer. 8 年之前
JavascriptNativeOperators.cpp c0723f4985 Moving RS4 changes to master 7 年之前
JavascriptNativeOperators.h c0723f4985 Moving RS4 changes to master 7 年之前
JitTransferData.cpp 3741b1a94a Refactor field related to JIT'ed code in EntryPointInfo into a separate structure 7 年之前
JitTransferData.h 3741b1a94a Refactor field related to JIT'ed code in EntryPointInfo into a separate structure 7 年之前
JnHelperMethod.cpp cf71a962c1 Merge 1809 October Update changes 7 年之前
JnHelperMethod.h cf71a962c1 Merge 1809 October Update changes 7 年之前
JnHelperMethodList.h cf71a962c1 Merge 1809 October Update changes 7 年之前
Lifetime.h eca08f1ab9 A pass over initialization of Arena-allocated classes 8 年之前
LinearScan.cpp f8bdb180c4 [CVE-2018-8359] Edge - Chakra OOB Write on ProxyEntryPointInfo - Internal 7 年之前
LinearScan.h 776c22503b Track bailout restoration based on TypeSpec flag rather than current symbol type 7 年之前
LinearScanMDShared.h 47eab483b9 change top-level dir Lib back to lib 10 年之前
Lower.cpp c76da44c27 CVE-2018-8588 7 年之前
Lower.h 91bb6d68bf [CVE-2018-8372] Edge - Report a type confusion bug in Edge - 360Vulcan 7 年之前
LowerMDShared.cpp cf71a962c1 Merge 1809 October Update changes 7 年之前
LowerMDShared.h cf71a962c1 Merge 1809 October Update changes 7 年之前
LowerMDSharedSimd128.cpp 88155df9e6 Remove Simd.js related code 8 年之前
NativeCodeData.cpp 2ec42c988d Store length on NativeCodeData for deallocation. 9 年之前
NativeCodeData.h 2ec42c988d Store length on NativeCodeData for deallocation. 9 年之前
NativeCodeGenerator.cpp 63ae30a750 [CVE-2018-8390] Edge - Inlining a fixed deferred function can lead to OOB read/write - Internal 7 年之前
NativeCodeGenerator.h 26833effbb Always use AsmJsDefault entrypoint instead of a wasm deferred parse entry point 7 年之前
NativeEntryPointData.cpp 15df2a6014 [CVE-2019-0640] Bug report for Edge/Chakra: Missing marshalling for Promise result 7 年之前
NativeEntryPointData.h 15df2a6014 [CVE-2019-0640] Bug report for Edge/Chakra: Missing marshalling for Promise result 7 年之前
ObjTypeSpecFldInfo.cpp 30f91acee0 Disable depolymorphication by default pending resolution of issues related to shared inline caches 7 年之前
ObjTypeSpecFldInfo.h ec0c73891e [MSFT 17535796] On depoloymorphication, write the slot index discovered during GlobOpt into the ObjTypeSpecFldInfo as well as the opnd field. That way it will be copied into the set that supports the runtime equivalence check. 7 年之前
Opnd.cpp 7cb51bf4e1 Support polymorphic type checks for objtypespec. For type checks where we have a set of multiple equivalent types, create a property guard that is structured like a polymorphic inline cache, with an underlying array of types indexed by a hash of the type pointer. 7 年之前
Opnd.h 91bb6d68bf [CVE-2018-8372] Edge - Report a type confusion bug in Edge - 360Vulcan 7 年之前
Opnd.inl fa9151ead4 Create new Opnd ListOpnd. Currently available only at lower and after. 8 年之前
PDataManager.cpp 15df2a6014 [CVE-2019-0640] Bug report for Edge/Chakra: Missing marshalling for Promise result 7 年之前
PDataManager.h 47eab483b9 change top-level dir Lib back to lib 10 年之前
PageAllocatorPool.cpp b4ba1ef180 fix codegen profiler under OOP JIT 7 年之前
PageAllocatorPool.h 02a02c3a59 Merge from unreleased/rs2 to release/1.4 9 年之前
Peeps.cpp 5ac01961ee Fix benign UAF in peeps. 8 年之前
Peeps.h 47eab483b9 change top-level dir Lib back to lib 10 年之前
PreLowerPeeps.cpp f010010ff3 change FindRegUse to HasSymUse 8 年之前
PrologEncoder.cpp 1e22644ddf use stack memory for some of the allocation in interpreter thunk emitter 9 年之前
PrologEncoder.h 1e22644ddf use stack memory for some of the allocation in interpreter thunk emitter 9 年之前
QueuedFullJitWorkItem.cpp 8567cfe6c1 update all references to use correct CamelCase file names 10 年之前
QueuedFullJitWorkItem.h 47eab483b9 change top-level dir Lib back to lib 10 年之前
Region.cpp ef2d1e05ab Fix for prefast warning 8 年之前
Region.h 82ff317978 Enable globopt for functions with try finally 8 年之前
SccLiveness.cpp 85b8c12301 [1.8>master] [MERGE #4419 @Penguinwizzard] A pass over initialization of Arena-allocated classes 8 年之前
SccLiveness.h 8567cfe6c1 update all references to use correct CamelCase file names 10 年之前
Security.cpp c0723f4985 Moving RS4 changes to master 7 年之前
Security.h 1c68c73e59 [1.7>1.8] [MERGE #4195 @boingoing] Merge unreleased/rs3 to release/1.7 8 年之前
ServerScriptContext.cpp b4ba1ef180 fix codegen profiler under OOP JIT 7 年之前
ServerScriptContext.h b4ba1ef180 fix codegen profiler under OOP JIT 7 年之前
ServerThreadContext.cpp 4a3ce7bcb9 Don't allocate in pre-reserved section if we had failed to reserve it on jit server init time. OS#15209418 7 年之前
ServerThreadContext.h 4a3ce7bcb9 Don't allocate in pre-reserved section if we had failed to reserve it on jit server init time. OS#15209418 7 年之前
SimpleJitProfilingHelpers.cpp c0723f4985 Moving RS4 changes to master 7 年之前
SimpleJitProfilingHelpers.h da8e8dd10e reinstate LdLen in bytecode with additional profile info 8 年之前
SimpleLayout.cpp 8567cfe6c1 update all references to use correct CamelCase file names 10 年之前
SimpleLayout.h 47eab483b9 change top-level dir Lib back to lib 10 年之前
SwitchIRBuilder.cpp 9dac95679e SwitchOpt determined by AggressiveIntTypeSpec breaks repeated String cases 8 年之前
SwitchIRBuilder.h 9dac95679e SwitchOpt determined by AggressiveIntTypeSpec breaks repeated String cases 8 年之前
Sym.cpp 42350a0088 When trying to untag a var, if that var is single def and is an int constant, simply return the IntConstOpnd with no checks. 8 年之前
Sym.h 75488126f0 Add SymID_Invalid to handle (SymID)-1 7 年之前
Sym.inl 8e000909fc One pass over GlobOpt.cpp, moving and consting 8 年之前
SymTable.cpp 6e39312394 Initialize locals 8 年之前
SymTable.h eca08f1ab9 A pass over initialization of Arena-allocated classes 8 年之前
TempTracker.cpp cf71a962c1 Merge 1809 October Update changes 7 年之前
TempTracker.h cec0e9a84f replace wchar_t/L"..." with char16/_u("...") 10 年之前
ValueInfo.cpp 88155df9e6 Remove Simd.js related code 8 年之前
ValueInfo.h c0723f4985 Moving RS4 changes to master 7 年之前
ValueRelativeOffset.cpp 47eab483b9 change top-level dir Lib back to lib 10 年之前
ValueRelativeOffset.h e3b673a4d7 Fix build errors using clang on windows with JIT 9 年之前