diff options
| author | Michael Brüning <michael.bruning@qt.io> | 2023-06-23 23:21:38 +0200 |
|---|---|---|
| committer | Michael Brüning <michael.bruning@qt.io> | 2023-06-23 21:23:26 +0000 |
| commit | 1104ce16c83cae1d6f953a96f1968fe2771ae0fb (patch) | |
| tree | 684b575ed7bebfbd8f49febceac6fa4f22bb5ada | |
| parent | 8f9fb8509d3fd1af0551709df1eb6f4aa34ead05 (diff) | |
Fixup [Backport] CVE-2023-2935: Type Confusion in V8
Build fix for 32 bit builds on Windows.
Change-Id: I0b8c1f6456799a05a7d816deb0d5c33db1234e59
Reviewed-on: https://codereview.qt-project.org/c/qt/qtwebengine-chromium/+/487551
Reviewed-by: Michael Brüning <michael.bruning@qt.io>
| -rw-r--r-- | chromium/v8/src/objects/lookup-inl.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/chromium/v8/src/objects/lookup-inl.h b/chromium/v8/src/objects/lookup-inl.h index 111aac8101b..e9551cf263a 100644 --- a/chromium/v8/src/objects/lookup-inl.h +++ b/chromium/v8/src/objects/lookup-inl.h @@ -123,7 +123,7 @@ LookupIterator::Key::Key(Isolate* isolate, Handle<Name> name, size_t index) DCHECK_IMPLIES(index_ == LookupIterator::kInvalidIndex, !name_.is_null()); #if V8_TARGET_ARCH_32_BIT DCHECK_IMPLIES(index_ != LookupIterator::kInvalidIndex, - index_ <= JSObject::kMaxElementIndex); + index_ <= JSArray::kMaxArrayIndex); #endif #if DEBUG if (index_ != LookupIterator::kInvalidIndex && !name_.is_null()) { |