Code

18-01 Security Update#4503

Code

Merged

chakrabot merged 20 commits intochakra-core:release/1.7chakra-core/ChakraCore:release/1.7from thomasmo:1801thomasmo/ChakraCore:1801Copy head branch name to clipboardJan 5, 2018

+480-163

Commits

Commits on Jan 5, 2018

• [CVE-2018-0769] JIT: Incorrect bounds calculation - Google, Inc.

  

  pleath

  authored and

  Thomas Moore (CHAKRA)

  committed
  0ea8624

  Copy full SHA for 0ea8624

• [CVE-2018-0774] Incorrect scope handling - Google, Inc.

  

  pleath

  authored and

  Thomas Moore (CHAKRA)

  committed
  5c26851

  Copy full SHA for 5c26851

• [CVE-2018-0768] Use of PropertyString and SubString,GetString() could lead to UAF - Individual

  

  Atul Katti

  authored and

  Thomas Moore (CHAKRA)

  committed
  985a82f

  Copy full SHA for 985a82f

• [CVE-2018-0776] JIT: stack-to-heap copy bug - Google, Inc.

  Show description for 40e45fc
  

  Thomas Moore (CHAKRA)

  committed
  40e45fc

  Copy full SHA for 40e45fc

• [CVE-2018-0767] OOB read in AppendLeftOverItemsFromEndSegment - Google, Inc.

  

  Cellule

  authored and

  Thomas Moore (CHAKRA)

  committed
  82825da

  Copy full SHA for 82825da

• [CVE-2018-0780] AsmJSByteCodeGenerator::EmitCall call handling results in OOB Read - Google, Inc.

  

  Cellule

  authored and

  Thomas Moore (CHAKRA)

  committed
  7013465

  Copy full SHA for 7013465

• Fix for xplat build for CVE-2018-0767

  

  Cellule

  authored and

  Thomas Moore (CHAKRA)

  committed
  9a77b67

  Copy full SHA for 9a77b67

• [CVE-2018-0775] Deferred parsing makes wrong scopes chakra-core#2 - Google, Inc.

  

  pleath

  authored and

  Thomas Moore (CHAKRA)

  committed
  ee5ac64

  Copy full SHA for ee5ac64

• [CVE-2018-0777] JIT: Loop analysis bug - Google, Inc.

  

  pleath

  authored and

  Thomas Moore (CHAKRA)

  committed
  14c752b

  Copy full SHA for 14c752b

• [CVE-2018-0778] Stack use after scope in Emit

  Show description for be3b212
  

  aneeshdk

  authored and

  Thomas Moore (CHAKRA)

  committed
  be3b212

  Copy full SHA for be3b212

• [CVE-2018-0781] Stack-use-after-scope in Js::JavascriptFunction::CallAsConstructor

  Show description for 1d0a527
  

  aneeshdk

  authored and

  Thomas Moore (CHAKRA)

  committed
  1d0a527

  Copy full SHA for 1d0a527

• [CVE-2018-0770] JIT: Incomplete fix for issue 1365 - Google, Inc.

  

  rajatd

  authored and

  Thomas Moore (CHAKRA)

  committed
  b0ff4cc

  Copy full SHA for b0ff4cc

• [CVE-2018-0762] 2 crashes : jscript9!JsJavascriptOperatorsPatchGetMethodJsPolymorphicInlineCache - Palo Alto Networks, Inc.

  

  leirocks

  authored and

  Thomas Moore (CHAKRA)

  committed
  51a6b6a

  Copy full SHA for 51a6b6a

• [CVE-2018-0772] Chakra Access violation - chakracore!Memory::HeapBlockMap32::L2MapChunk::Set+2e - Individual

  

  leirocks

  authored and

  Thomas Moore (CHAKRA)

  committed
  a1c8240

  Copy full SHA for a1c8240

• [CVE-2018-0758] Integer overflow bug in the latest version of Edge causing RCE - Individual

  

  meg-gupta

  authored and

  Thomas Moore (CHAKRA)

  committed
  4db0bd2

  Copy full SHA for 4db0bd2

• [CVE-2018-0773] An uaf bug in the latest version of Edge,lead to rce - Qihoo 360

  Show description for a267c5b
  

  boingoing

  authored and

  Thomas Moore (CHAKRA)

  committed
  a267c5b

  Copy full SHA for a267c5b

• Disable SharedArrayBuffer by default

  Show description for ee2538d
  

  leirocks

  authored and

  Thomas Moore (CHAKRA)

  committed
  ee2538d

  Copy full SHA for ee2538d

• Update ChakraCore version to 1.7.6

  

  Thomas Moore (CHAKRA)

  committed
  50677d3

  Copy full SHA for 50677d3

• Fix xplat build error

  

  Thomas Moore (CHAKRA)

  committed
  2281a73

  Copy full SHA for 2281a73

• Fix copyright build error

  

  Thomas Moore (CHAKRA)

  committed
  7b59f02

  Copy full SHA for 7b59f02