| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
Reduce unused gen/include include dir $target_gen_dir/include is added to many compile actions, while only include/v8-inspector-protocol.h depends on the generated header files. The redundant include dir is problematic for deterministic remote compiles. See http://b/306144160 for more details. //third_party/blink/renderer/core/inspector:generated is the only target that depends v8-inspector-protocol.h The dependency has already been corrected in https://crrev.com/c/4951341 This CL changes v8 GN configs to add $target_gen_dir/include only to a subset of compiles. Bug: b/306144160 Change-Id: Id1b00584580af49726fec3fc183b655c83d4cf28 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/5004484 Auto-Submit: Junji Watanabe <jwata@google.com> Reviewed-by: Toon Verwaest <verwaest@chromium.org> Commit-Queue: Toon Verwaest <verwaest@chromium.org> Cr-Commit-Position: refs/heads/main@{#90834} | 2 年前 | |
[base] import base/numerics from chromium and replace the existing base/safe_conversions*.h Patchset 1 is the direct copy from the chromium src. All additional changes, like fixing the namespace, include guards etc are uploaded as individual patchsets. This is intended to be used for the Untrusted<T> (crbug.com/404726204). Bug: 404726204 Change-Id: I0f80be065f09bc8ddfdca4a6ff940ee5d71c4353 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6419244 Reviewed-by: Michael Lippautz <mlippautz@chromium.org> Commit-Queue: Stephen Röttger <sroettger@google.com> Reviewed-by: Leszek Swirski <leszeks@chromium.org> Cr-Commit-Position: refs/heads/main@{#99610} | 1 年前 | |
Add DIR_METADATA files to v8. Generate DIR_METADATA files and remove metadata from OWNERS files for v8. R=jkummerow@chromium.org, ochang@chromium.org, yangguo@chromium.org Bug: chromium:1113033 Change-Id: I82cbb62e438d82dbbc408e87120af39fa9da0afa Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2476680 Reviewed-by: Adam Klein <adamk@chromium.org> Reviewed-by: Maya Lekova <mslekova@chromium.org> Reviewed-by: Jakob Kummerow <jkummerow@chromium.org> Reviewed-by: Yang Guo <yangguo@chromium.org> Commit-Queue: Edward Lesmes <ehmaldonado@chromium.org> Auto-Submit: Edward Lesmes <ehmaldonado@chromium.org> Cr-Commit-Position: refs/heads/master@{#70669} | 5 年前 | |
Remove inactive accounts from OWNERS Remove jarin, mslekova, and tebbi from OWNERS files. Bug: 338340739 Change-Id: I9ec3708793a07ddf4d11ea4b186b711406e5668f Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/5540776 Reviewed-by: Michael Lippautz <mlippautz@chromium.org> Commit-Queue: Adam Klein <adamk@chromium.org> Auto-Submit: Adam Klein <adamk@chromium.org> Cr-Commit-Position: refs/heads/main@{#93981} | 2 年前 | |
[inspector] Avoid sliding breakpoints for same scripts We change the breakpoint hint logic to check if the script has not locally changed (with a hash of the source text between the requested breakpoint location and the actual breakpoint location). If the text did not change, we set the breakpoint at the same location as before. Bug: chromium:1404643 Change-Id: I6ceecf9924e699aaf37518680d1cb79d3eb00959 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/4138260 Commit-Queue: Jaroslav Sevcik <jarin@chromium.org> Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Cr-Commit-Position: refs/heads/main@{#85131} | 3 年前 | |
[inspector] Avoid sliding breakpoints for same scripts We change the breakpoint hint logic to check if the script has not locally changed (with a hash of the source text between the requested breakpoint location and the actual breakpoint location). If the text did not change, we set the breakpoint at the same location as before. Bug: chromium:1404643 Change-Id: I6ceecf9924e699aaf37518680d1cb79d3eb00959 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/4138260 Commit-Queue: Jaroslav Sevcik <jarin@chromium.org> Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Cr-Commit-Position: refs/heads/main@{#85131} | 3 年前 | |
[v8] Fix CVE-491884710 CVE-470566252 CVE-484527367 CVE-483851888 CVE-495679730 CVE-487768771 CVE-496301615 CVE-486927780 TicketNo: DTS2026040900445 Description: [v8] Fix CVE Team:gitcode Feature or Bugfix: Binary Source: sync from gitcode PrivateCode(Yes/No):No Change-Id: I9cc86759f497b795aaa41f2cccab2efc3892eb26 Reviewed-by: j30014474,y00500721 Approved-by: y00500721 Merged-on: https://open.codehub.huawei.com/OpenSourceCenter_CR/openharmony-tpc/chromium_v8/-/change_requests/540 Merged-by: public pjenkins Signed-off-by: gaojunyu <gaojunyu2@h-partners.com> revert merge request: DTS2026012010158 [v8] Fix CVE 64df2ca2a94233d7fa209bb3244843ceb12235ca This revert merge request !452 | 1 个月前 | |
Reland "[api] Avoid GetIsolateFromWritableObject() in GetCreationContext()" This is a reland of commit 150ce0e3e96588559853405fe811be2dc86d70a0 This CL was reverted because of a missing v8::Isolate::Scope in Chromium. After landing https://crrev.com/c/5909505 we should be able to reland this CL unchanged. Original change's description: > [api] Avoid GetIsolateFromWritableObject() in GetCreationContext() > > We can replace this call in GetCreationContext() with > Isolate::Current() similar to v8::String::MakeExternal. This CL also > starts the deprecation process for the Isolate-less version of this > method. > > Bug: 336738728 > Change-Id: I69b0424f7967d3c82a4ff283cc27cf1087075ac0 > Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/5898893 > Reviewed-by: Michael Lippautz <mlippautz@chromium.org> > Commit-Queue: Dominik Inführ <dinfuehr@chromium.org> > Cr-Commit-Position: refs/heads/main@{#96361} Bug: 336738728 Change-Id: I0935f8b9820ffa1bbe231d07559ff1901740249f Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/5906106 Reviewed-by: Michael Lippautz <mlippautz@chromium.org> Commit-Queue: Dominik Inführ <dinfuehr@chromium.org> Cr-Commit-Position: refs/heads/main@{#96440} | 1 年前 | |
[v8] Fix CVE-491884710 CVE-470566252 CVE-484527367 CVE-483851888 CVE-495679730 CVE-487768771 CVE-496301615 CVE-486927780 TicketNo: DTS2026040900445 Description: [v8] Fix CVE Team:gitcode Feature or Bugfix: Binary Source: sync from gitcode PrivateCode(Yes/No):No Change-Id: I9cc86759f497b795aaa41f2cccab2efc3892eb26 Reviewed-by: j30014474,y00500721 Approved-by: y00500721 Merged-on: https://open.codehub.huawei.com/OpenSourceCenter_CR/openharmony-tpc/chromium_v8/-/change_requests/540 Merged-by: public pjenkins Signed-off-by: gaojunyu <gaojunyu2@h-partners.com> revert merge request: DTS2026012010158 [v8] Fix CVE 64df2ca2a94233d7fa209bb3244843ceb12235ca This revert merge request !452 | 1 个月前 | |
Remove remaining Maybe references + roll of inspector_protocol Bug: 40276207 Change-Id: I947dcbcee8f0562e25a05bb6183f10e660075f0d Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6049648 Reviewed-by: Yang Guo <yangguo@chromium.org> Commit-Queue: Yang Guo <yangguo@chromium.org> Reviewed-by: Simon Zünd <szuend@chromium.org> Auto-Submit: Alex Rudenko <alexrudenko@chromium.org> Cr-Commit-Position: refs/heads/main@{#97443} | 1 年前 | |
Fix some compile failures under C++23 As a side effect of making ~unique_ptr<T> constexpr and how Clang implements things, T must be complete at the point where the template is instantiated. A forward declaration, with the type filled in later, isn't sufficient. One side effect is that inner types often need to be defined earlier, if the constructor would depend on them by way of unique_ptr. Bug: 388068055 Change-Id: I333604510252de35bdadce1ef3c2fe52ecb288e8 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7003444 Auto-Submit: David Benjamin <davidben@chromium.org> Reviewed-by: Dominik Inführ <dinfuehr@chromium.org> Reviewed-by: Michael Lippautz <mlippautz@chromium.org> Cr-Commit-Position: refs/heads/main@{#102981} | 8 个月前 | |
[heap] Disallow JS execution in second pass callbacks. Second pass callbacks are supposed to be triggered from weak callbacks where further processing is needed. Executing JS from such callbacks is unsafe as the GC may be triggered via stack check. Embedders that requires executing JS as follow up action to reclaiming a weak reference should use the task runner to schedule this work as task. Bug: 40924387 Change-Id: I7c79b6ec2f8b5aead0cea0527d9459717b9a56ff Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/4733273 Reviewed-by: Dominik Inführ <dinfuehr@chromium.org> Commit-Queue: Michael Lippautz <mlippautz@chromium.org> Cr-Commit-Position: refs/heads/main@{#99245} | 1 年前 | |
Make heap snapshots more precise Sometimes I've observed that heap snapshots include objects which should no longer be reachable but persist due to conservatively scanned stack references. The trash can button in devtools can get rid of these objects because it runs the GC with EmbedderStackState::kNoHeapPointers. I propose that we follow the same pattern for snapshots: post a non-nestable task to take the snapshot, and prevent conservative stack scanning during that task. A slight complication arises because snapshots should also work while paused at a debug breakpoint, so in that case, we must keep the current behavior which takes the snapshot immediately and includes conservative stack scanning. Bug: chromium:1440749 Change-Id: I6c9a34ca19e2501c970e7be433ddf704c7125422 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/4499405 Reviewed-by: Michael Lippautz <mlippautz@chromium.org> Reviewed-by: Yang Guo <yangguo@chromium.org> Commit-Queue: Seth Brenith <seth.brenith@microsoft.com> Cr-Commit-Position: refs/heads/main@{#87698} | 3 年前 | |
[inspector] Prepend isolateId to remoteObjectId This changes remoteObjectId format from "{injectedScriptId:123,id:456}" to "<isolateId>.<contextId>.<id>". Prepending isolateId fixes the problem that remote object ids clash between processes. This is especially troubling during cross-process navigation in Chromium, see bug. We also stop producing and parsing unnecessary json for object ids. Drive-by: fixed some tests dumping object ids. Most tests avoid dumping unstable values like ids, but there were few that still did. BUG=chromium:1137143 Change-Id: Ia019757fb95704ccb718d3ea6cc54bde1a133382 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2461731 Commit-Queue: Dmitry Gozman <dgozman@chromium.org> Reviewed-by: Yang Guo <yangguo@chromium.org> Cr-Commit-Position: refs/heads/master@{#70592} | 5 年前 | |
[inspector] Prepend isolateId to remoteObjectId This changes remoteObjectId format from "{injectedScriptId:123,id:456}" to "<isolateId>.<contextId>.<id>". Prepending isolateId fixes the problem that remote object ids clash between processes. This is especially troubling during cross-process navigation in Chromium, see bug. We also stop producing and parsing unnecessary json for object ids. Drive-by: fixed some tests dumping object ids. Most tests avoid dumping unstable values like ids, but there were few that still did. BUG=chromium:1137143 Change-Id: Ia019757fb95704ccb718d3ea6cc54bde1a133382 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2461731 Commit-Queue: Dmitry Gozman <dgozman@chromium.org> Reviewed-by: Yang Guo <yangguo@chromium.org> Cr-Commit-Position: refs/heads/master@{#70592} | 5 年前 | |
[inspector] Surface 'debugId' magic comment as 'buildId' CDP field We pass the field straight-through from V8 via CDP. The only quirk is when scripts fail to parse: In this case we have some existing logic that uses a best-effort regex to retrieve the magic comments. To stay consistent, we'll do the same for debugId. R=leszeks@chromium.org, pfaffe@chromium.org Bug: 413177407 Change-Id: Ic1793470f3e98b225a1ff907ca613a4953eb5db2 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6491466 Commit-Queue: Simon Zünd <szuend@chromium.org> Reviewed-by: Philip Pfaffe <pfaffe@chromium.org> Cr-Commit-Position: refs/heads/main@{#99907} | 1 年前 | |
[inspector] Surface 'debugId' magic comment as 'buildId' CDP field We pass the field straight-through from V8 via CDP. The only quirk is when scripts fail to parse: In this case we have some existing logic that uses a best-effort regex to retrieve the magic comments. To stay consistent, we'll do the same for debugId. R=leszeks@chromium.org, pfaffe@chromium.org Bug: 413177407 Change-Id: Ic1793470f3e98b225a1ff907ca613a4953eb5db2 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6491466 Commit-Queue: Simon Zünd <szuend@chromium.org> Reviewed-by: Philip Pfaffe <pfaffe@chromium.org> Cr-Commit-Position: refs/heads/main@{#99907} | 1 年前 | |
[HeapSnapshot] Use iterator constructor in String16 One overload of the std::basic_string constructor accepts start and end iterators of any type that is assignable to CharT. This can be used to create a String16 from char* data in a much more performant manner than iterating over the char*s and assigning them individually. This code snippet demonstrates that the resulting strings are the same: https://cplayground.com/?p=jackal-seahorse-sloth Using this constructor results in a ~6% reduction in snapshot transfer time on YouTube.com (reduced to 3373ms from 3574ms). Snapshot size: 95.7 MB Nodes: 1,865,544 Edges: 10,420,066 Change-Id: I1e19eac3f158178e4a3fd37eba48c89d5c64d54e Bug: 387077340 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6360854 Commit-Queue: Seth Brenith <seth.brenith@microsoft.com> Reviewed-by: Seth Brenith <seth.brenith@microsoft.com> Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Cr-Commit-Position: refs/heads/main@{#99300} | 1 年前 | |
[conversions] Return std::string_view from *ToCString methods Previously, DoubleToCString, IntToCString, DoubleToFixedCString, DoubleToExponentialCString, DoubleToPrecisionCString and DoubleToRadixCString returned a 0-terminated C-String. However most users of these methods copy the C-String again (e.g. into a V8 Heap object), thus requiring another strlen() call to retrieve the length, that is already known within these methods. Therefore this CL changes the following: - *ToCString methods return a std::string_view (not 0-terminated) instead of a 0-terminated C-String. - The caller provides the required buffer to store the result. Previously the methods created a malloced buffer and transferred ownership to the caller. By requiring the caller to provide the buffer (1) ownership is clear and (2) the buffer can be stack allocated. - Rename *ToCString to *ToStringView to reflect the changed semantics. Bug: 380044242, 377438310 Change-Id: If7b44d0dc8ff8551d4aaeac01f5d20e1528a9c3f Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6105411 Commit-Queue: Patrick Thier <pthier@chromium.org> Reviewed-by: Leszek Swirski <leszeks@chromium.org> Cr-Commit-Position: refs/heads/main@{#97879} | 1 年前 | |
[sandbox][api] Use new String::Write* APIs In https://crrev.com/c/5975682 we introduced new version of the String::Write* APIs. In this CL, all users of the old API in V8 are converted to the new API. Bug: 373485796, 376071292 Change-Id: Ia2ec193c266322bb627ebfa9acdd642f87bb6286 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/5979449 Commit-Queue: Samuel Groß <saelo@chromium.org> Reviewed-by: Michael Lippautz <mlippautz@chromium.org> Cr-Commit-Position: refs/heads/main@{#97172} | 1 年前 | |
Remove remaining Maybe references + roll of inspector_protocol Bug: 40276207 Change-Id: I947dcbcee8f0562e25a05bb6183f10e660075f0d Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6049648 Reviewed-by: Yang Guo <yangguo@chromium.org> Commit-Queue: Yang Guo <yangguo@chromium.org> Reviewed-by: Simon Zünd <szuend@chromium.org> Auto-Submit: Alex Rudenko <alexrudenko@chromium.org> Cr-Commit-Position: refs/heads/main@{#97443} | 1 年前 | |
[inspector] removed kDebugPromiseCollected event With recent CLs we always store maximum N async stack traces and when we reach limit we drop half of them. Current promise collected event requires creating weak handle: - it takes time, - it consumes memory. Since async task id distribution for promises is uniform (each new promise has last_async_task_id + 1 as an id) our hash map is good enough to handle any amount of async task ids, following time of executing 1 000 000 000 of lookups: - for empty hash map: 1.45 seconds, - for hash map with one entry: 14.95 seconds - 1024 entries: 15.03 seconds - 1024 * 1024 entries: 14.82 seconds - 1024 * 1024 * 1024: 17.9 seconds BUG=v8:6189 R=dgozman@chromium.org,yangguo@chromium.org Review-Url: https://codereview.chromium.org/2819423005 Cr-Commit-Position: refs/heads/master@{#44750} | 9 年前 | |
Reland "[include] Split out v8.h" This is a reland of d1b27019d3bf86360ea838c317f8505fac6d3a7e Fixes include: Adding missing file to bazel build Forward-declaring classing before friend-classing them to fix win/gcc Add missing v8-isolate.h include for vtune builds Original change's description: > [include] Split out v8.h > > This moves every single class/function out of include/v8.h into a > separate header in include/, which v8.h then includes so that > externally nothing appears to have changed. > > Every include of v8.h from inside v8 has been changed to a more > fine-grained include. > > Previously inline functions defined at the bottom of v8.h would call > private non-inline functions in the V8 class. Since that class is now > in v8-initialization.h and is rarely included (as that would create > dependency cycles), this is not possible and so those methods have been > moved out of the V8 class into the namespace v8::api_internal. > > None of the previous files in include/ now #include v8.h, which means > if embedders were relying on this transitive dependency then it will > give compile failures. > > v8-inspector.h does depend on v8-scripts.h for the time being to ensure > that Chrome continue to compile but that change will be reverted once > those transitive #includes in chrome are changed to include it directly. > > Full design: > https://docs.google.com/document/d/1rTD--I8hCAr-Rho1WTumZzFKaDpEp0IJ8ejZtk4nJdA/edit?usp=sharing > > Bug: v8:11965 > Change-Id: I53b84b29581632710edc80eb11f819c2097a2877 > Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3097448 > Reviewed-by: Yang Guo <yangguo@chromium.org> > Reviewed-by: Camillo Bruni <cbruni@chromium.org> > Reviewed-by: Jakob Kummerow <jkummerow@chromium.org> > Reviewed-by: Leszek Swirski <leszeks@chromium.org> > Reviewed-by: Michael Lippautz <mlippautz@chromium.org> > Commit-Queue: Dan Elphick <delphick@chromium.org> > Cr-Commit-Position: refs/heads/main@{#76424} Cq-Include-Trybots: luci.v8.try:v8_linux_vtunejit Bug: v8:11965 Change-Id: I99f5d3a73bf8fe25b650adfaf9567dc4e44a09e6 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3113629 Reviewed-by: Leszek Swirski <leszeks@chromium.org> Reviewed-by: Camillo Bruni <cbruni@chromium.org> Reviewed-by: Michael Lippautz <mlippautz@chromium.org> Reviewed-by: Jakob Kummerow <jkummerow@chromium.org> Reviewed-by: Simon Zünd <szuend@chromium.org> Commit-Queue: Dan Elphick <delphick@chromium.org> Cr-Commit-Position: refs/heads/main@{#76460} | 4 年前 | |
[v8] Fix CVE-491884710 CVE-470566252 CVE-484527367 CVE-483851888 CVE-495679730 CVE-487768771 CVE-496301615 CVE-486927780 TicketNo: DTS2026040900445 Description: [v8] Fix CVE Team:gitcode Feature or Bugfix: Binary Source: sync from gitcode PrivateCode(Yes/No):No Change-Id: I9cc86759f497b795aaa41f2cccab2efc3892eb26 Reviewed-by: j30014474,y00500721 Approved-by: y00500721 Merged-on: https://open.codehub.huawei.com/OpenSourceCenter_CR/openharmony-tpc/chromium_v8/-/change_requests/540 Merged-by: public pjenkins Signed-off-by: gaojunyu <gaojunyu2@h-partners.com> revert merge request: DTS2026012010158 [v8] Fix CVE 64df2ca2a94233d7fa209bb3244843ceb12235ca This revert merge request !452 | 1 个月前 | |
[cleanup][inspector] Remove DISALLOW_COPY_AND_ASSIGN Bug: v8:11074 Change-Id: I71fabf7628ec13440585c24381f5ba89e4df03d3 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2543168 Reviewed-by: Yang Guo <yangguo@chromium.org> Commit-Queue: Zhi An Ng <zhin@chromium.org> Cr-Commit-Position: refs/heads/master@{#71246} | 5 年前 | |
[v8] Fix CVE-491884710 CVE-470566252 CVE-484527367 CVE-483851888 CVE-495679730 CVE-487768771 CVE-496301615 CVE-486927780 TicketNo: DTS2026040900445 Description: [v8] Fix CVE Team:gitcode Feature or Bugfix: Binary Source: sync from gitcode PrivateCode(Yes/No):No Change-Id: I9cc86759f497b795aaa41f2cccab2efc3892eb26 Reviewed-by: j30014474,y00500721 Approved-by: y00500721 Merged-on: https://open.codehub.huawei.com/OpenSourceCenter_CR/openharmony-tpc/chromium_v8/-/change_requests/540 Merged-by: public pjenkins Signed-off-by: gaojunyu <gaojunyu2@h-partners.com> revert merge request: DTS2026012010158 [v8] Fix CVE 64df2ca2a94233d7fa209bb3244843ceb12235ca This revert merge request !452 | 1 个月前 | |
[console] Align console.count() and console.countReset(). Following up on https://crrev.com/c/5688760, this CL removes some dead code and aligns console.count() and console.countReset() with the console.time() and friends. According to MDN[1], both count() and countReset() when called without an explicit label should behave like they were passed the string "default", which renders a lot of the logic in here obsolete. [1]: https://developer.mozilla.org/en-US/docs/Web/API/console/count_static Bug: 40574970 Change-Id: I4e111e8b71babfc9cab627615ce5e36727cad985 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/5701286 Reviewed-by: Simon Zünd <szuend@chromium.org> Commit-Queue: Benedikt Meurer <bmeurer@chromium.org> Cr-Commit-Position: refs/heads/main@{#94996} | 1 年前 | |
[v8] Fix CVE-491884710 CVE-470566252 CVE-484527367 CVE-483851888 CVE-495679730 CVE-487768771 CVE-496301615 CVE-486927780 TicketNo: DTS2026040900445 Description: [v8] Fix CVE Team:gitcode Feature or Bugfix: Binary Source: sync from gitcode PrivateCode(Yes/No):No Change-Id: I9cc86759f497b795aaa41f2cccab2efc3892eb26 Reviewed-by: j30014474,y00500721 Approved-by: y00500721 Merged-on: https://open.codehub.huawei.com/OpenSourceCenter_CR/openharmony-tpc/chromium_v8/-/change_requests/540 Merged-by: public pjenkins Signed-off-by: gaojunyu <gaojunyu2@h-partners.com> revert merge request: DTS2026012010158 [v8] Fix CVE 64df2ca2a94233d7fa209bb3244843ceb12235ca This revert merge request !452 | 1 个月前 | |
[ept] Delete tag kExternalObjectValueTag The tag was a generic tag used for v8::External. After a recent refactoring, the generic tag should not be used anymore. Instead, type-specific tags should be used. Additionally the number of tags reserved for v8::External gets reduced from 100 to 40, as this is enough in currently for Chrome, where 34 tags are used so far. The reduction is needed to make sure that the ExternalPointerTags stay within 7 bit range. Another change is that the tags that were used so far for tests are out of range now. Therefore, the tags get shifted to a new value range. Bug: 436799229 Change-Id: I0bbef6391bd4340d8d113ba01a565d9f1a24a0a4 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7003791 Reviewed-by: Michael Lippautz <mlippautz@chromium.org> Commit-Queue: Andreas Haas <ahaas@chromium.org> Cr-Commit-Position: refs/heads/main@{#102975} | 8 个月前 | |
[v8] Fix CVE-491884710 CVE-470566252 CVE-484527367 CVE-483851888 CVE-495679730 CVE-487768771 CVE-496301615 CVE-486927780 TicketNo: DTS2026040900445 Description: [v8] Fix CVE Team:gitcode Feature or Bugfix: Binary Source: sync from gitcode PrivateCode(Yes/No):No Change-Id: I9cc86759f497b795aaa41f2cccab2efc3892eb26 Reviewed-by: j30014474,y00500721 Approved-by: y00500721 Merged-on: https://open.codehub.huawei.com/OpenSourceCenter_CR/openharmony-tpc/chromium_v8/-/change_requests/540 Merged-by: public pjenkins Signed-off-by: gaojunyu <gaojunyu2@h-partners.com> revert merge request: DTS2026012010158 [v8] Fix CVE 64df2ca2a94233d7fa209bb3244843ceb12235ca This revert merge request !452 | 1 个月前 | |
Remove remaining Maybe references + roll of inspector_protocol Bug: 40276207 Change-Id: I947dcbcee8f0562e25a05bb6183f10e660075f0d Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6049648 Reviewed-by: Yang Guo <yangguo@chromium.org> Commit-Queue: Yang Guo <yangguo@chromium.org> Reviewed-by: Simon Zünd <szuend@chromium.org> Auto-Submit: Alex Rudenko <alexrudenko@chromium.org> Cr-Commit-Position: refs/heads/main@{#97443} | 1 年前 | |
DevTools: use a barrier to sync runIfWaitingForDebugger from multiple sessions This introduces a barrier that ensures that V8InspectorClient::runIfWaitingForDebugger() is only invoked once all sessions that requested a paused have invoked runIfWaitingForDebugger. Downstream change: https://chromium-review.googlesource.com/c/chromium/src/+/3977348 Bug: chromium:1352175 Change-Id: I9049c2de6da8e690ad4312cd6cb799619125bb62 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3976353 Reviewed-by: Jaroslav Sevcik <jarin@chromium.org> Reviewed-by: Toon Verwaest <verwaest@chromium.org> Commit-Queue: Andrey Kosyakov <caseq@chromium.org> Cr-Commit-Position: refs/heads/main@{#84191} | 3 年前 | |
DevTools: use a barrier to sync runIfWaitingForDebugger from multiple sessions This introduces a barrier that ensures that V8InspectorClient::runIfWaitingForDebugger() is only invoked once all sessions that requested a paused have invoked runIfWaitingForDebugger. Downstream change: https://chromium-review.googlesource.com/c/chromium/src/+/3977348 Bug: chromium:1352175 Change-Id: I9049c2de6da8e690ad4312cd6cb799619125bb62 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3976353 Reviewed-by: Jaroslav Sevcik <jarin@chromium.org> Reviewed-by: Toon Verwaest <verwaest@chromium.org> Commit-Queue: Andrey Kosyakov <caseq@chromium.org> Cr-Commit-Position: refs/heads/main@{#84191} | 3 年前 | |
Add V8Inspector::uniqueDebuggerId method This method returns the unique debugger ID for a v8::Context (i.e. the V8DebuggerID), serialized to a pair of int64_ts. Bug: v8:12528 Change-Id: Ib2cdda73447f8233f9afb773fed4a634d4618aef Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3369124 Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Commit-Queue: Alex Turner <alexmt@chromium.org> Cr-Commit-Position: refs/heads/main@{#78958} | 4 年前 | |
Add V8Inspector::uniqueDebuggerId method This method returns the unique debugger ID for a v8::Context (i.e. the V8DebuggerID), serialized to a pair of int64_ts. Bug: v8:12528 Change-Id: Ib2cdda73447f8233f9afb773fed4a634d4618aef Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3369124 Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Commit-Queue: Alex Turner <alexmt@chromium.org> Cr-Commit-Position: refs/heads/main@{#78958} | 4 年前 | |
[inspector] Consolidate 'ActualScript' and 'V8DebuggerScript' Since WASM scripts no longer have a dedicated 'V8DebuggerScript' sub-class, we can combine 'AcutalScript' and 'V8DebuggerScript' into a single class and get rid of the inheritance. The CL is a pure mechanical change combining the fields and methods. The CL also gets rid of the factory function. R=bmeurer@chromium.org Bug: 413177407 Change-Id: I72c436845ba0cc315f0dab871a55551226cf4cf8 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6491387 Commit-Queue: Simon Zünd <szuend@chromium.org> Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Cr-Commit-Position: refs/heads/main@{#99909} | 1 年前 | |
[inspector] Consolidate 'ActualScript' and 'V8DebuggerScript' Since WASM scripts no longer have a dedicated 'V8DebuggerScript' sub-class, we can combine 'AcutalScript' and 'V8DebuggerScript' into a single class and get rid of the inheritance. The CL is a pure mechanical change combining the fields and methods. The CL also gets rid of the factory function. R=bmeurer@chromium.org Bug: 413177407 Change-Id: I72c436845ba0cc315f0dab871a55551226cf4cf8 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6491387 Commit-Queue: Simon Zünd <szuend@chromium.org> Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Cr-Commit-Position: refs/heads/main@{#99909} | 1 年前 | |
[v8] Fix CVE-491884710 CVE-470566252 CVE-484527367 CVE-483851888 CVE-495679730 CVE-487768771 CVE-496301615 CVE-486927780 TicketNo: DTS2026040900445 Description: [v8] Fix CVE Team:gitcode Feature or Bugfix: Binary Source: sync from gitcode PrivateCode(Yes/No):No Change-Id: I9cc86759f497b795aaa41f2cccab2efc3892eb26 Reviewed-by: j30014474,y00500721 Approved-by: y00500721 Merged-on: https://open.codehub.huawei.com/OpenSourceCenter_CR/openharmony-tpc/chromium_v8/-/change_requests/540 Merged-by: public pjenkins Signed-off-by: gaojunyu <gaojunyu2@h-partners.com> revert merge request: DTS2026012010158 [v8] Fix CVE 64df2ca2a94233d7fa209bb3244843ceb12235ca This revert merge request !452 | 1 个月前 | |
[inspector] Trace async parent per v8::StackTrace. This fixes a long-standing inconsistency, where we'd capture synchronous stack traces as v8::StackTrace (on the V8 heap) at some point, and only associate the async stack trace when transforming this V8 internal object into a v8_inspector::V8StackTrace instance. These two events can happen at different points in time, and thus the async parent can differ (and no longer match the correct async parent at the time when the stack trace was captured). With this change we now use the previously introduced ID on v8::StackTrace instances to memorize the correct async parents in the v8_inspector::V8Debugger. The inspector is notified of any stack trace capturing via the AsyncEventDelegate interface, and at the point where a v8::StackTrace is turned into a v8_inspector::V8StackTrace or a v8_inspector::AsyncStackTrace, we look up the async parent based on the ID of the v8::StackTrace. This way, async parents are now always correctly matching the synchronous part of the stack trace reported from the inspector. The debugger will now eagerly create v8::StackTraces whenever an error object is created and the inspector is attached (and asking for detailed stack traces upon uncaught exceptions). Prior to this change we tried to delay the creation of the detailed stack trace for as long as possible, but that optimization is likely overkill, since in Chrome the inspector will almost always immediately ask for the detailed stack trace for every exception thrown. But if this turns out to be a performance problem in the real world (during debugging) we can always defer the creation of the v8::StackTrace object a bit more. Bug: 350426235 Change-Id: I4b299438ee38f04c4d8ef162e1a8c517e8d6ca0c Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/5882140 Commit-Queue: Benedikt Meurer <bmeurer@chromium.org> Auto-Submit: Benedikt Meurer <bmeurer@chromium.org> Reviewed-by: Simon Zünd <szuend@chromium.org> Cr-Commit-Position: refs/heads/main@{#96303} | 1 年前 | |
Avoid internal use of v8::Object::GetIsolate() ... such that we can deprecate it in a follow-up. The method is guaranteed to always return the "current isolate", so we should use that directly instead. Test sometimes use CcTest::isolate() or LocalContext::isolate() where it makes sense. R=leszeks@chromium.org Bug: 396607238 Change-Id: Iac924a78ac59be4029a75b1ff6b917160d1f7e06 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6564467 Commit-Queue: Clemens Backes <clemensb@chromium.org> Reviewed-by: Leszek Swirski <leszeks@chromium.org> Cr-Commit-Position: refs/heads/main@{#100391} | 1 年前 | |
Serialization additionalParameters Splitting crrev.com/c/4555602. Part 4. * Rename serializeToWebDriverValue to deepSerialize. * Add additionalParameters as an argument to deepSerialize. * Values of additionalParameters can be only of type string or int. * deepSerialize can return a error message. * CDP: add additionalParameters to SerializationOptions. * Will be used in crrev.com/c/4593409. Bug: chromium:1420968 Change-Id: Idd31e530127e7d3d05123492d2d97869fc2969a4 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/4582552 Reviewed-by: Simon Zünd <szuend@chromium.org> Commit-Queue: Maksim Sadym <sadym@chromium.org> Reviewed-by: Jaroslav Sevcik <jarin@chromium.org> Cr-Commit-Position: refs/heads/main@{#88343} | 2 年前 | |
[v8] Fix CVE-491884710 CVE-470566252 CVE-484527367 CVE-483851888 CVE-495679730 CVE-487768771 CVE-496301615 CVE-486927780 TicketNo: DTS2026040900445 Description: [v8] Fix CVE Team:gitcode Feature or Bugfix: Binary Source: sync from gitcode PrivateCode(Yes/No):No Change-Id: I9cc86759f497b795aaa41f2cccab2efc3892eb26 Reviewed-by: j30014474,y00500721 Approved-by: y00500721 Merged-on: https://open.codehub.huawei.com/OpenSourceCenter_CR/openharmony-tpc/chromium_v8/-/change_requests/540 Merged-by: public pjenkins Signed-off-by: gaojunyu <gaojunyu2@h-partners.com> revert merge request: DTS2026012010158 [v8] Fix CVE 64df2ca2a94233d7fa209bb3244843ceb12235ca This revert merge request !452 | 1 个月前 | |
[cdp] Add stackDepth parameter for HeapProfiler.startSampling The Sampling Heap Profiler already supports a stackDepth option internally, but the CDP method HeapProfiler.startSampling did not expose it. This CL adds support for passing stackDepth through CDP. Bug: 443840066 Change-Id: I18ccad126d75b49785a8fde37564be57ecc9c84c Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6931850 Commit-Queue: Roman Dvornov <romandvornov@microsoft.com> Reviewed-by: Simon Zünd <szuend@chromium.org> Reviewed-by: Camillo Bruni <cbruni@chromium.org> Cr-Commit-Position: refs/heads/main@{#102429} | 9 个月前 | |
[v8] Fix CVE-491884710 CVE-470566252 CVE-484527367 CVE-483851888 CVE-495679730 CVE-487768771 CVE-496301615 CVE-486927780 TicketNo: DTS2026040900445 Description: [v8] Fix CVE Team:gitcode Feature or Bugfix: Binary Source: sync from gitcode PrivateCode(Yes/No):No Change-Id: I9cc86759f497b795aaa41f2cccab2efc3892eb26 Reviewed-by: j30014474,y00500721 Approved-by: y00500721 Merged-on: https://open.codehub.huawei.com/OpenSourceCenter_CR/openharmony-tpc/chromium_v8/-/change_requests/540 Merged-by: public pjenkins Signed-off-by: gaojunyu <gaojunyu2@h-partners.com> revert merge request: DTS2026012010158 [v8] Fix CVE 64df2ca2a94233d7fa209bb3244843ceb12235ca This revert merge request !452 | 1 个月前 | |
[v8] Fix CVE-491884710 CVE-470566252 CVE-484527367 CVE-483851888 CVE-495679730 CVE-487768771 CVE-496301615 CVE-486927780 TicketNo: DTS2026040900445 Description: [v8] Fix CVE Team:gitcode Feature or Bugfix: Binary Source: sync from gitcode PrivateCode(Yes/No):No Change-Id: I9cc86759f497b795aaa41f2cccab2efc3892eb26 Reviewed-by: j30014474,y00500721 Approved-by: y00500721 Merged-on: https://open.codehub.huawei.com/OpenSourceCenter_CR/openharmony-tpc/chromium_v8/-/change_requests/540 Merged-by: public pjenkins Signed-off-by: gaojunyu <gaojunyu2@h-partners.com> revert merge request: DTS2026012010158 [v8] Fix CVE 64df2ca2a94233d7fa209bb3244843ceb12235ca This revert merge request !452 | 1 个月前 | |
[v8] Fix CVE-491884710 CVE-470566252 CVE-484527367 CVE-483851888 CVE-495679730 CVE-487768771 CVE-496301615 CVE-486927780 TicketNo: DTS2026040900445 Description: [v8] Fix CVE Team:gitcode Feature or Bugfix: Binary Source: sync from gitcode PrivateCode(Yes/No):No Change-Id: I9cc86759f497b795aaa41f2cccab2efc3892eb26 Reviewed-by: j30014474,y00500721 Approved-by: y00500721 Merged-on: https://open.codehub.huawei.com/OpenSourceCenter_CR/openharmony-tpc/chromium_v8/-/change_requests/540 Merged-by: public pjenkins Signed-off-by: gaojunyu <gaojunyu2@h-partners.com> revert merge request: DTS2026012010158 [v8] Fix CVE 64df2ca2a94233d7fa209bb3244843ceb12235ca This revert merge request !452 | 1 个月前 | |
[inspector] Add V8Inspector::connectShared This CL adds a version of the 'connect' method that returns a shared_ptr rather than a unique_ptr. This allows us to defer deconstruction of V8InspectorSession objects. We use this in "dispatchProtocolMessage" for now. The main reason is that blink is allowed to tear down V8 sessions on the nested run-loop, while actual agent/session functions remain on the stack. This CL attempts to fix this in a more general way than patching adhocs UaF. Note that its not clear if this fixes all instances where the session dies on the nested run loop: There are other entry points into inspector agent code that can then transition into JS and then run a nested event loop, e.g. client events or interrupts. Bug: 40071155 Change-Id: I48f599cfcda2cf8ed71e3b865a6d2e71daa59061 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6433946 Commit-Queue: Simon Zünd <szuend@chromium.org> Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Cr-Commit-Position: refs/heads/main@{#99784} | 1 年前 | |
Reland "[profiler] Add CpuProfileSource to distinguish concurrent profile streams" This is a reland of commit bd03113e5c857b8f648ccdf7f59649d3def289f9 Original change's description: > [profiler] Add CpuProfileSource to distinguish concurrent profile streams > > DevTools merges concurrent CPU profile streams on the same thread, which > corrupts JavaScript attribution when multiple profiling sources are active > simultaneously. For example, when JS Self-Profiling API runs concurrently > with internal V8 tracing, their samples get incorrectly merged into a > single profile. > > This CL adds a CpuProfileSource enum to tag profile events at their source, > enabling DevTools to keep streams separate and maintain correct attribution. > > JS Self-Profiling will pass kSelfProfiling in follow-up Chromium CL > > Related CLs: > DevTools CL: https://crrev.com/c/6877206 > Chromium CL: https://crrev.com/c/6874588 > > Bug: 375614293 > Change-Id: I8fda56acedaaeadbbe4f911b27d36658d8248393 > Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7004962 > Reviewed-by: Michael Lippautz <mlippautz@chromium.org> > Reviewed-by: Yang Guo <yangguo@chromium.org> > Commit-Queue: Issack John <issackjohn@microsoft.com> > Cr-Commit-Position: refs/heads/main@{#103512} Bug: 375614293 Change-Id: I2f9dcdeb6e3f3d32fbaadac21d73631d37be8d7a Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7122240 Reviewed-by: Michael Lippautz <mlippautz@chromium.org> Commit-Queue: Issack John <issackjohn@microsoft.com> Reviewed-by: Yang Guo <yangguo@chromium.org> Cr-Commit-Position: refs/heads/main@{#103578} | 7 个月前 | |
Remove remaining Maybe references + roll of inspector_protocol Bug: 40276207 Change-Id: I947dcbcee8f0562e25a05bb6183f10e660075f0d Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6049648 Reviewed-by: Yang Guo <yangguo@chromium.org> Commit-Queue: Yang Guo <yangguo@chromium.org> Reviewed-by: Simon Zünd <szuend@chromium.org> Auto-Submit: Alex Rudenko <alexrudenko@chromium.org> Cr-Commit-Position: refs/heads/main@{#97443} | 1 年前 | |
[inspector] Prevent regex breakpoints from re-entering the debugger This patch uses the postpone-interrupts scope to prevent regexes from re-entering the debugger when matching regex breakpoints (while setting or removing regex breakpoints). The test is separate in a Blink CL: crrev.com/c/4355146 Bug: chromium:1426163 Change-Id: I4eb7873645a02c286664e0b6ddb53b9fb7db64f6 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/4355440 Reviewed-by: Simon Zünd <szuend@chromium.org> Commit-Queue: Jaroslav Sevcik <jarin@chromium.org> Cr-Commit-Position: refs/heads/main@{#86621} | 3 年前 | |
Reland "[include] Split out v8.h" This is a reland of d1b27019d3bf86360ea838c317f8505fac6d3a7e Fixes include: Adding missing file to bazel build Forward-declaring classing before friend-classing them to fix win/gcc Add missing v8-isolate.h include for vtune builds Original change's description: > [include] Split out v8.h > > This moves every single class/function out of include/v8.h into a > separate header in include/, which v8.h then includes so that > externally nothing appears to have changed. > > Every include of v8.h from inside v8 has been changed to a more > fine-grained include. > > Previously inline functions defined at the bottom of v8.h would call > private non-inline functions in the V8 class. Since that class is now > in v8-initialization.h and is rarely included (as that would create > dependency cycles), this is not possible and so those methods have been > moved out of the V8 class into the namespace v8::api_internal. > > None of the previous files in include/ now #include v8.h, which means > if embedders were relying on this transitive dependency then it will > give compile failures. > > v8-inspector.h does depend on v8-scripts.h for the time being to ensure > that Chrome continue to compile but that change will be reverted once > those transitive #includes in chrome are changed to include it directly. > > Full design: > https://docs.google.com/document/d/1rTD--I8hCAr-Rho1WTumZzFKaDpEp0IJ8ejZtk4nJdA/edit?usp=sharing > > Bug: v8:11965 > Change-Id: I53b84b29581632710edc80eb11f819c2097a2877 > Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3097448 > Reviewed-by: Yang Guo <yangguo@chromium.org> > Reviewed-by: Camillo Bruni <cbruni@chromium.org> > Reviewed-by: Jakob Kummerow <jkummerow@chromium.org> > Reviewed-by: Leszek Swirski <leszeks@chromium.org> > Reviewed-by: Michael Lippautz <mlippautz@chromium.org> > Commit-Queue: Dan Elphick <delphick@chromium.org> > Cr-Commit-Position: refs/heads/main@{#76424} Cq-Include-Trybots: luci.v8.try:v8_linux_vtunejit Bug: v8:11965 Change-Id: I99f5d3a73bf8fe25b650adfaf9567dc4e44a09e6 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3113629 Reviewed-by: Leszek Swirski <leszeks@chromium.org> Reviewed-by: Camillo Bruni <cbruni@chromium.org> Reviewed-by: Michael Lippautz <mlippautz@chromium.org> Reviewed-by: Jakob Kummerow <jkummerow@chromium.org> Reviewed-by: Simon Zünd <szuend@chromium.org> Commit-Queue: Dan Elphick <delphick@chromium.org> Cr-Commit-Position: refs/heads/main@{#76460} | 4 年前 | |
[v8] Fix CVE-491884710 CVE-470566252 CVE-484527367 CVE-483851888 CVE-495679730 CVE-487768771 CVE-496301615 CVE-486927780 TicketNo: DTS2026040900445 Description: [v8] Fix CVE Team:gitcode Feature or Bugfix: Binary Source: sync from gitcode PrivateCode(Yes/No):No Change-Id: I9cc86759f497b795aaa41f2cccab2efc3892eb26 Reviewed-by: j30014474,y00500721 Approved-by: y00500721 Merged-on: https://open.codehub.huawei.com/OpenSourceCenter_CR/openharmony-tpc/chromium_v8/-/change_requests/540 Merged-by: public pjenkins Signed-off-by: gaojunyu <gaojunyu2@h-partners.com> revert merge request: DTS2026012010158 [v8] Fix CVE 64df2ca2a94233d7fa209bb3244843ceb12235ca This revert merge request !452 | 1 个月前 | |
In CDP Runtime.getHeapUsage, report cppgc and backing store sizes The numbers shown in the "Select JavaScript VM instance" pane are not close to the sizes of heap snapshots, largely due to inconsistent handling of memory usage outside the V8 heap. This change is one step toward fixing the problem. In a subsequent change, DevTools will present the sum of V8 heap size, cppgc heap size, and backing storage size in the "Select JavaScript VM instance" pane. Bug: 40734351 Change-Id: I195b47809b2413be78f976cb7d3d975c292dac88 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6194534 Reviewed-by: Simon Zünd <szuend@chromium.org> Commit-Queue: Seth Brenith <seth.brenith@microsoft.com> Cr-Commit-Position: refs/heads/main@{#98315} | 1 年前 | |
[DevTools] Roll inspector_protocol (V8) Upstream PR: "Introduce a crdtp/dispatch.{h,cc} library." https://chromium-review.googlesource.com/c/deps/inspector_protocol/+/1974680 "For the shallow parse of a DevTools message, allow "params": null." https://chromium-review.googlesource.com/c/deps/inspector_protocol/+/2109466 New Revision: c69cdc36200992d21a17bf4e5c2f3a95b8860ddf Change-Id: Icc447ff9ce408b24f5245c643dd2f1843da9255f Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2076215 Commit-Queue: Johannes Henkel <johannes@chromium.org> Reviewed-by: Yang Guo <yangguo@chromium.org> Cr-Commit-Position: refs/heads/master@{#66813} | 6 年前 | |
[cleanup][inspector] Remove DISALLOW_COPY_AND_ASSIGN Bug: v8:11074 Change-Id: I71fabf7628ec13440585c24381f5ba89e4df03d3 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2543168 Reviewed-by: Yang Guo <yangguo@chromium.org> Commit-Queue: Zhi An Ng <zhin@chromium.org> Cr-Commit-Position: refs/heads/master@{#71246} | 5 年前 | |
[ept] Delete tag kExternalObjectValueTag The tag was a generic tag used for v8::External. After a recent refactoring, the generic tag should not be used anymore. Instead, type-specific tags should be used. Additionally the number of tags reserved for v8::External gets reduced from 100 to 40, as this is enough in currently for Chrome, where 34 tags are used so far. The reduction is needed to make sure that the ExternalPointerTags stay within 7 bit range. Another change is that the tags that were used so far for tests are out of range now. Therefore, the tags get shifted to a new value range. Bug: 436799229 Change-Id: I0bbef6391bd4340d8d113ba01a565d9f1a24a0a4 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7003791 Reviewed-by: Michael Lippautz <mlippautz@chromium.org> Commit-Queue: Andreas Haas <ahaas@chromium.org> Cr-Commit-Position: refs/heads/main@{#102975} | 8 个月前 | |
Add weakLocalObjectId to WebDriver serialization Preparation for extending serialization [1]. To avoid duplicates and loops during serialization and to implement WebDriver BiDi serialization [2], weakLocalObjectId is introduced. * V8SerializationDuplicateTracker has an instance per serialization, and keeps track of all the non-primitive values were already serialized. In case of a known value is met again, the weakLocalObjectId property is set both to the original and to the duplicate serialized value. * As long as EphemeronTable cannot store the reference to protocol::DictionaryValue, the all the serialized values are stored in the vector m_known_values. m_hashTable contains a map from v8_value to the index of corresponding serialized value. * As long as values should be serialized recursively and to avoid unnecessary cloning, the value-mirror serialises values into protocol::DictionaryValue, and injected-script gets required properties form the Dictionary to construct protocol::Runtime::WebDriverValue. [1] https://goo.gle/browser-automation-deepserialization [2] https://w3c.github.io/webdriver-bidi/#set-internal-ids-if-needed Bug: chromium:1420968 Change-Id: I32cfa08b336efad6e135c01fd42cdf47afc41a97 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/4433571 Commit-Queue: Maksim Sadym <sadym@chromium.org> Reviewed-by: Simon Zünd <szuend@chromium.org> Cr-Commit-Position: refs/heads/main@{#87336} | 3 年前 | |
[v8 Stack trace] Include script id in V8stackFrame in v8 inspector V8StackFrame objects in the v8 inspector are built from v8::StackFrame objects. However the script ID contained in the latter isn't included in the former. As a consequence this data is missing in clients of the v8 inspector. In particular,trace events that include a source location as a stack trace [1] do not have access to it. This CL adds the script id to the struct so that clients can consume the script id along with the rest of the stack frame data. [1] https://chromium-review.googlesource.com/c/chromium/src/+/6063066 Bug: 381861194 Change-Id: I30300bd8092a79a46e19ddeec4dc828fc8fc05f0 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6063587 Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Commit-Queue: Andres Olivares <andoli@chromium.org> Reviewed-by: Simon Zünd <szuend@chromium.org> Auto-Submit: Andres Olivares <andoli@chromium.org> Cr-Commit-Position: refs/heads/main@{#97534} | 1 年前 | |
Add V8StackFrame export To be able to retrieve structured stacktrace information like the functionName of single stack frames outsite of v8, this cl adds a V8StackFrame class and a function to retrieve them from V8StacKFrames. Bug: chromium:1393317 Change-Id: Idae150aeb03f7b65294c4c6a6979c298a569e6d2 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/4067040 Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Commit-Queue: Judith Hemp <hempjudith@google.com> Cr-Commit-Position: refs/heads/main@{#84676} | 3 年前 | |
[inspector] avoid dereferencing an end iterator Microsoft STL does not allow dereferencing an end iterator of an std::string. Compute the end pointer directly without dereferencing. Refs: https://github.com/microsoft/STL/blob/ba64eaaa8592c700949f3c09a0d8570b932828f5/stl/inc/xstring#L53-L54 Refs: https://github.com/nodejs/node/issues/60048 Change-Id: Ic3ed1b021f7c6d24cf24241f4d34478d7d574dbd Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7017107 Commit-Queue: Simon Zünd <szuend@chromium.org> Reviewed-by: Simon Zünd <szuend@chromium.org> Cr-Commit-Position: refs/heads/main@{#102986} | 8 个月前 | |
Fix build issue, remove unneeded include uchar.h. Follow the conversation on: https://groups.google.com/g/v8-dev/c/nsbshwlmP3c. The uchar.h include is not necessary. It was added to get the definition of char16_t but that's an intrinsic type in C++. Change-Id: I0aaa11dba0be3ccad15b9e421f8bae71450d443b Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/4823404 Reviewed-by: Omer Katz <omerkatz@chromium.org> Commit-Queue: Eric Leese <leese@chromium.org> Reviewed-by: Eric Leese <leese@chromium.org> Cr-Commit-Position: refs/heads/main@{#89787} | 2 年前 | |
Avoid internal use of v8::Object::GetIsolate() ... such that we can deprecate it in a follow-up. The method is guaranteed to always return the "current isolate", so we should use that directly instead. Test sometimes use CcTest::isolate() or LocalContext::isolate() where it makes sense. R=leszeks@chromium.org Bug: 396607238 Change-Id: Iac924a78ac59be4029a75b1ff6b917160d1f7e06 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6564467 Commit-Queue: Clemens Backes <clemensb@chromium.org> Reviewed-by: Leszek Swirski <leszeks@chromium.org> Cr-Commit-Position: refs/heads/main@{#100391} | 1 年前 | |
Reland "[include] Split out v8.h" This is a reland of d1b27019d3bf86360ea838c317f8505fac6d3a7e Fixes include: Adding missing file to bazel build Forward-declaring classing before friend-classing them to fix win/gcc Add missing v8-isolate.h include for vtune builds Original change's description: > [include] Split out v8.h > > This moves every single class/function out of include/v8.h into a > separate header in include/, which v8.h then includes so that > externally nothing appears to have changed. > > Every include of v8.h from inside v8 has been changed to a more > fine-grained include. > > Previously inline functions defined at the bottom of v8.h would call > private non-inline functions in the V8 class. Since that class is now > in v8-initialization.h and is rarely included (as that would create > dependency cycles), this is not possible and so those methods have been > moved out of the V8 class into the namespace v8::api_internal. > > None of the previous files in include/ now #include v8.h, which means > if embedders were relying on this transitive dependency then it will > give compile failures. > > v8-inspector.h does depend on v8-scripts.h for the time being to ensure > that Chrome continue to compile but that change will be reverted once > those transitive #includes in chrome are changed to include it directly. > > Full design: > https://docs.google.com/document/d/1rTD--I8hCAr-Rho1WTumZzFKaDpEp0IJ8ejZtk4nJdA/edit?usp=sharing > > Bug: v8:11965 > Change-Id: I53b84b29581632710edc80eb11f819c2097a2877 > Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3097448 > Reviewed-by: Yang Guo <yangguo@chromium.org> > Reviewed-by: Camillo Bruni <cbruni@chromium.org> > Reviewed-by: Jakob Kummerow <jkummerow@chromium.org> > Reviewed-by: Leszek Swirski <leszeks@chromium.org> > Reviewed-by: Michael Lippautz <mlippautz@chromium.org> > Commit-Queue: Dan Elphick <delphick@chromium.org> > Cr-Commit-Position: refs/heads/main@{#76424} Cq-Include-Trybots: luci.v8.try:v8_linux_vtunejit Bug: v8:11965 Change-Id: I99f5d3a73bf8fe25b650adfaf9567dc4e44a09e6 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3113629 Reviewed-by: Leszek Swirski <leszeks@chromium.org> Reviewed-by: Camillo Bruni <cbruni@chromium.org> Reviewed-by: Michael Lippautz <mlippautz@chromium.org> Reviewed-by: Jakob Kummerow <jkummerow@chromium.org> Reviewed-by: Simon Zünd <szuend@chromium.org> Commit-Queue: Dan Elphick <delphick@chromium.org> Cr-Commit-Position: refs/heads/main@{#76460} | 4 年前 | |
[v8] Fix CVE-491884710 CVE-470566252 CVE-484527367 CVE-483851888 CVE-495679730 CVE-487768771 CVE-496301615 CVE-486927780 TicketNo: DTS2026040900445 Description: [v8] Fix CVE Team:gitcode Feature or Bugfix: Binary Source: sync from gitcode PrivateCode(Yes/No):No Change-Id: I9cc86759f497b795aaa41f2cccab2efc3892eb26 Reviewed-by: j30014474,y00500721 Approved-by: y00500721 Merged-on: https://open.codehub.huawei.com/OpenSourceCenter_CR/openharmony-tpc/chromium_v8/-/change_requests/540 Merged-by: public pjenkins Signed-off-by: gaojunyu <gaojunyu2@h-partners.com> revert merge request: DTS2026012010158 [v8] Fix CVE 64df2ca2a94233d7fa209bb3244843ceb12235ca This revert merge request !452 | 1 个月前 | |
[inspector] Switch ValueMirror from v8::Local to v8::Global. Drive-by-fix: While we are at it, also simplify the logic for creating ValueMirror's a bit. Bug: chromium:1505767 Change-Id: Ic0d7c9c8ac1236801120bde2b302973a3daea0a8 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/5067999 Reviewed-by: Simon Zünd <szuend@chromium.org> Commit-Queue: Benedikt Meurer <bmeurer@chromium.org> Cr-Commit-Position: refs/heads/main@{#91239} | 2 年前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 2 年前 | ||
| 1 年前 | ||
| 5 年前 | ||
| 2 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 1 个月前 | ||
| 1 年前 | ||
| 1 个月前 | ||
| 1 年前 | ||
| 8 个月前 | ||
| 1 年前 | ||
| 3 年前 | ||
| 5 年前 | ||
| 5 年前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 9 年前 | ||
| 4 年前 | ||
| 1 个月前 | ||
| 5 年前 | ||
| 1 个月前 | ||
| 1 年前 | ||
| 1 个月前 | ||
| 8 个月前 | ||
| 1 个月前 | ||
| 1 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 4 年前 | ||
| 4 年前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 1 个月前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 2 年前 | ||
| 1 个月前 | ||
| 9 个月前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 1 年前 | ||
| 7 个月前 | ||
| 1 年前 | ||
| 3 年前 | ||
| 4 年前 | ||
| 1 个月前 | ||
| 1 年前 | ||
| 6 年前 | ||
| 5 年前 | ||
| 8 个月前 | ||
| 3 年前 | ||
| 1 年前 | ||
| 3 年前 | ||
| 8 个月前 | ||
| 2 年前 | ||
| 1 年前 | ||
| 4 年前 | ||
| 1 个月前 | ||
| 2 年前 |