diff options
| author | Allan Sandfeld Jensen <allan.jensen@theqtcompany.com> | 2016-07-26 14:14:20 +0200 |
|---|---|---|
| committer | Allan Sandfeld Jensen <allan.jensen@qt.io> | 2016-08-10 13:47:48 +0000 |
| commit | e63b94dd0a1510de212006d07cd13669a10b09ee (patch) | |
| tree | 1e59b4e0362db398d59297ebe1d4fc781d98ab5a /chromium/v8/src/objects.h | |
| parent | e0789295a59955578e3c5bea22c2f4c747a3e15f (diff) | |
| download | qtwebengine-chromium-e63b94dd0a1510de212006d07cd13669a10b09ee.tar.gz | |
[Backport] Version 5.2.361.32 (cherry-pick)
Merged d800a65967b115c6e1aa6c3ba08861a304383088
Merged 7a88ff3cc096ecd681e9d10ad0a75c7d3daf027e
Merged a7159577b7d092ef6283c51f8bb2c456b0e23a38
[heap] Filter out stale left-trimmed handles
[heap] Filter out stale left-trimmed handles for scavenges
[heap] Iterate handles with special left-trim visitor
BUG=chromium:620553,chromium:620553,chromium:621869
LOG=N
R=hablich@chromium.org, hpayer@chromium.org
NOTRY=true
NOPRESUBMIT=true
Review-Url: https://codereview.chromium.org/2111133002
(CVE-2016-5129)
Change-Id: I2467362ee4d79f34fe3c57b38463cc65da64073a
Reviewed-by: Michael BrĂ¼ning <michael.bruning@qt.io>
Diffstat (limited to 'chromium/v8/src/objects.h')
| -rw-r--r-- | chromium/v8/src/objects.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/chromium/v8/src/objects.h b/chromium/v8/src/objects.h index 00ffee9a858..872df5c7a4e 100644 --- a/chromium/v8/src/objects.h +++ b/chromium/v8/src/objects.h @@ -1382,7 +1382,7 @@ class MapWord BASE_EMBEDDED { // True if this map word is a forwarding address for a scavenge // collection. Only valid during a scavenge collection (specifically, // when all map words are heap object pointers, i.e. not during a full GC). - inline bool IsForwardingAddress(); + inline bool IsForwardingAddress() const; // Create a map word from a forwarding address. static inline MapWord FromForwardingAddress(HeapObject* object); |
