-
Clemens Backes authored
{Invoke} is the central bottleneck for calling into generated code. Check that at this point, no {CodeSpaceWriteScope} is open, otherwise the JS code could write to the code space once it gains access to an arbitrary-write gadget. R=jkummerow@chromium.org Bug: v8:11974 Change-Id: Ie323cea442a5ea355a1c975b300a1cc5a6edf433 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3487787Reviewed-by: Jakob Kummerow <jkummerow@chromium.org> Commit-Queue: Clemens Backes <clemensb@chromium.org> Cr-Commit-Position: refs/heads/main@{#79287}
730d826e