WebKit Bugzilla
New
Browse
Search+
Log In
×
Sign in with GitHub
or
Remember my login
Create Account
·
Forgot Password
Forgotten password account recovery
RESOLVED FIXED
263187
Make all senstitive $vm properties not enumerable by Object.getOwnPropertyNames.
https://bugs.webkit.org/show_bug.cgi?id=263187
Summary
Make all senstitive $vm properties not enumerable by Object.getOwnPropertyNames.
Mark Lam
Reported
2023-10-16 00:08:28 PDT
$vm functions are not meant to be enumerable. That's why all of them have the DontEnum attribute. However, Object.getOwnPropertyNames does not honor this by default. As a result, this can trip up fuzzers that happens to enumerate it with Object.getOwnPropertyNames.
rdar://112814894
Attachments
Add attachment
proposed patch, testcase, etc.
Mark Lam
Comment 1
2023-10-16 00:20:01 PDT
Pull request:
https://github.com/WebKit/WebKit/pull/19104
EWS
Comment 2
2023-10-16 07:28:47 PDT
Committed
269361@main
(86513355ed9f): <
https://commits.webkit.org/269361@main
> Reviewed commits have been landed. Closing PR #19104 and removing active labels.
Note
You need to
log in
before you can comment on or make changes to this bug.
Top of Page
Format For Printing
XML
Clone This Bug