From 0532d46d8991dd853421c2f270f8fb45e4d3e6e0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michael=20Br=C3=BCning?= Date: Fri, 14 May 2021 13:23:50 +0200 Subject: Fix up [Backport] CVE-2021-30513: Type Confusion in V8. ChangeOp used to be a static method in NodeProperties. Change-Id: I9c4e0fa49fb9aac9eb4fbf0ba696f8d2ac4745e9 Reviewed-by: Michal Klocek --- chromium/v8/src/compiler/simplified-lowering.cc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/chromium/v8/src/compiler/simplified-lowering.cc b/chromium/v8/src/compiler/simplified-lowering.cc index e031ef0ed91..c008fe0d4a9 100644 --- a/chromium/v8/src/compiler/simplified-lowering.cc +++ b/chromium/v8/src/compiler/simplified-lowering.cc @@ -1282,7 +1282,7 @@ class RepresentationSelector { restriction = Type::Signed32(); } VisitBinop(node, input_use, MachineRepresentation::kWord32, restriction); - if (lower()) ChangeOp(node, simplified()->CheckedInt32Mul(mz_mode)); + if (lower()) NodeProperties::ChangeOp(node, simplified()->CheckedInt32Mul(mz_mode)); } void ChangeToInt32OverflowOp(Node* node) { -- cgit v1.2.1