Files
ladybird/Userland/Libraries/LibJS/Runtime
Luke Wilde 2f3ebce7c8 LibJS: Keep GeneratorObject's stored execution context's internals alive
This would previously crash with a heap UAF when storing the result of
`yield 1` into `e` on the second `next` call:
```js
function* a() { const e = yield 1; }
b = a();
b.next();
gc();
b.next();
```
2022-12-12 13:58:32 +00:00
..
2022-08-29 03:24:54 +02:00
2022-08-29 03:24:54 +02:00
2022-12-03 23:52:23 +00:00
2022-08-29 03:24:54 +02:00
2022-12-10 00:21:10 +00:00
2022-08-27 11:29:10 +01:00
2022-12-03 23:52:23 +00:00
2022-08-29 03:24:54 +02:00
2022-12-03 23:52:23 +00:00
2022-12-02 13:09:15 +01:00
2022-12-02 13:09:15 +01:00
2022-08-29 03:24:54 +02:00
2022-08-29 03:24:54 +02:00
2022-08-29 03:24:54 +02:00
2022-08-29 03:24:54 +02:00