• Anton Bikineev's avatar
    cppgc: shared-cage: Fix UaF when lsan is enabled · a1da1458
    Anton Bikineev authored
    Before this CL, the caged heap was lazily initialized upon the first
    call of HeapBase ctor. CagedHeap keeps a pointer to PageAllocator which
    was provided from cppgc::Platform through the HeapBase ctor. This was
    not generally safe: the platform is not enforced to be singleton. If it
    happens to die first, then CagedHeap will have a stale pointer. The CL
    fixes it simply by moving caged-heap initialization to
    cppgc::InitializeProcess(), which already requires a constantly living
    PageAllocator.
    
    Bug: chromium:1338030
    Change-Id: Ifb70a2db233ef36a99c919db09bed9ff9f3708ac
    Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3732107
    Commit-Queue: Anton Bikineev <bikineev@chromium.org>
    Reviewed-by: 's avatarMichael Lippautz <mlippautz@chromium.org>
    Cr-Commit-Position: refs/heads/main@{#81422}
    a1da1458
Name
Last commit
Last update
..
api Loading commit data...
asmjs Loading commit data...
ast Loading commit data...
base Loading commit data...
baseline Loading commit data...
bigint Loading commit data...
builtins Loading commit data...
codegen Loading commit data...
common Loading commit data...
compiler Loading commit data...
compiler-dispatcher Loading commit data...
d8 Loading commit data...
date Loading commit data...
debug Loading commit data...
deoptimizer Loading commit data...
diagnostics Loading commit data...
execution Loading commit data...
extensions Loading commit data...
flags Loading commit data...
handles Loading commit data...
heap Loading commit data...
ic Loading commit data...
init Loading commit data...
inspector Loading commit data...
interpreter Loading commit data...
json Loading commit data...
libplatform Loading commit data...
libsampler Loading commit data...
logging Loading commit data...
maglev Loading commit data...
numbers Loading commit data...
objects Loading commit data...
parsing Loading commit data...
profiler Loading commit data...
protobuf Loading commit data...
regexp Loading commit data...
roots Loading commit data...
runtime Loading commit data...
sandbox Loading commit data...
sanitizer Loading commit data...
snapshot Loading commit data...
strings Loading commit data...
tasks Loading commit data...
temporal Loading commit data...
third_party Loading commit data...
torque Loading commit data...
tracing Loading commit data...
trap-handler Loading commit data...
utils Loading commit data...
wasm Loading commit data...
web-snapshot Loading commit data...
zone Loading commit data...
DEPS Loading commit data...
DIR_METADATA Loading commit data...
OWNERS Loading commit data...