fdcaa3d452
When using correctness fuzzing, this makes sure all non-object arguments to typed array constructors are bound by 1MiB when interpreted as numbers. NOTRY=true Bug: chromium:910962 Change-Id: I66e87ece27aae7c5fa88429c5d1f1f478de702ae Reviewed-on: https://chromium-review.googlesource.com/c/1369959 Commit-Queue: Michael Achenbach <machenbach@chromium.org> Reviewed-by: Mathias Bynens <mathias@chromium.org> Reviewed-by: Peter Marshall <petermarshall@chromium.org> Cr-Commit-Position: refs/heads/master@{#58144} |
||
---|---|---|
.. | ||
testdata | ||
BUILD.gn | ||
PRESUBMIT.py | ||
v8_commands.py | ||
v8_foozzie_harness_adjust.js | ||
v8_foozzie_test.py | ||
v8_foozzie.py | ||
v8_fuzz_config.py | ||
v8_mock_archs.js | ||
v8_mock.js | ||
v8_suppressions.js | ||
v8_suppressions.py |