diff options
| author | Michael Brüning <michael.bruning@qt.io> | 2021-05-14 13:23:50 +0200 |
|---|---|---|
| committer | Michael Brüning <michael.bruning@qt.io> | 2021-05-14 11:44:02 +0000 |
| commit | 0532d46d8991dd853421c2f270f8fb45e4d3e6e0 (patch) | |
| tree | dd8115acd44f78c7ccf3cf162365a757a37077fe | |
| parent | 3e0b0ec3e4080feecaf82e2e99a3e1e17bb82b3d (diff) | |
| download | qtwebengine-chromium-0532d46d8991dd853421c2f270f8fb45e4d3e6e0.tar.gz | |
Fix up [Backport] CVE-2021-30513: Type Confusion in V8.
ChangeOp used to be a static method in NodeProperties.
Change-Id: I9c4e0fa49fb9aac9eb4fbf0ba696f8d2ac4745e9
Reviewed-by: Michal Klocek <michal.klocek@qt.io>
| -rw-r--r-- | chromium/v8/src/compiler/simplified-lowering.cc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/chromium/v8/src/compiler/simplified-lowering.cc b/chromium/v8/src/compiler/simplified-lowering.cc index e031ef0ed91..c008fe0d4a9 100644 --- a/chromium/v8/src/compiler/simplified-lowering.cc +++ b/chromium/v8/src/compiler/simplified-lowering.cc @@ -1282,7 +1282,7 @@ class RepresentationSelector { restriction = Type::Signed32(); } VisitBinop(node, input_use, MachineRepresentation::kWord32, restriction); - if (lower()) ChangeOp(node, simplified()->CheckedInt32Mul(mz_mode)); + if (lower()) NodeProperties::ChangeOp(node, simplified()->CheckedInt32Mul(mz_mode)); } void ChangeToInt32OverflowOp(Node* node) { |