[sandbox] Sandboxify AccessorInfo external pointers

Bug: v8:10391
Change-Id: I18745b415962e08fada5c0b9466a0d7e66a84a12
Cq-Include-Trybots: luci.v8.try:v8_linux64_heap_sandbox_dbg_ng,v8_linux_arm64_sim_heap_sandbox_dbg_ng
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3757339
Reviewed-by: Igor Sheludko <ishell@chromium.org>
Commit-Queue: Samuel Groß <saelo@chromium.org>
Cr-Commit-Position: refs/heads/main@{#81999}
This commit is contained in:
Samuel Groß 2022-07-27 13:00:47 +02:00 committed by V8 LUCI CQ
parent 2689fecccd
commit 7586dc7910

View File

@ -385,9 +385,9 @@ constexpr uint64_t kAllExternalPointerTypeTags[] = {
V(kExternalObjectValueTag, sandboxed, TAG(14)) \
V(kCallHandlerInfoCallbackTag, unsandboxed, TAG(15)) \
V(kCallHandlerInfoJsCallbackTag, unsandboxed, TAG(16)) \
V(kAccessorInfoGetterTag, unsandboxed, TAG(17)) \
V(kAccessorInfoJsGetterTag, unsandboxed, TAG(18)) \
V(kAccessorInfoSetterTag, unsandboxed, TAG(19)) \
V(kAccessorInfoGetterTag, sandboxed, TAG(17)) \
V(kAccessorInfoJsGetterTag, sandboxed, TAG(18)) \
V(kAccessorInfoSetterTag, sandboxed, TAG(19)) \
V(kWasmInternalFunctionCallTargetTag, sandboxed, TAG(20))
// All external pointer tags.