Repository navigation
Segmentations fault with --untrusted-code-mitigations #43296
Description
Version
16.15.0
Platform
Linux zanardance 5.14.0-1036-oem #40-Ubuntu SMP Mon May 9 09:15:08 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
macOS has the same problem
Subsystem
No response
What steps will reproduce the bug?
Use this code:
'use strict';
while (true) {
const tagKeys = Object.keys({ k: 'key' });
// const tagKeys = [ 1 ];
tagKeys[0];
}And run with --untrusted-code-mitigations:
$ node --untrusted-code-mitigations foo.jsHow often does it reproduce? Is there a required condition?
Every time.
What is the expected behavior?
No response
What do you see instead?
Segmentation fault.
Additional information
No response
Activity
XadillaX commentedon Jun 2, 2022
Sync to v8 issue: https://bugs.chromium.org/p/v8/issues/detail?id=12931
targos commentedon Jun 2, 2022
Note that V8 removed untrusted code mitigations in https://chromium-review.googlesource.com/c/v8/v8/+/3045704 (landed in version 9.5 / Node.js 17.0.0)
deps: cherry-pick 4ab70f6 from V8 upstream
deps: cherry-pick 4ab70f6 from V8 upstream
deps: cherry-pick 4ab70f6 from V8 upstream
targos commentedon Jul 18, 2022
Fixed in #43328
deps: cherry-pick 4ab70f6 from V8 upstream
Remove mention of --untrusted-code-mitigations in README.md
Remove mention of --untrusted-code-mitigations in README.md (#458)