Repository Issue Activity (beta)

#557 BigInt.asUintN returns signed values for 64-bit width

#555 add jsfuck compatibility(suggestions)

#533 [BUG] qjs: SIGSEGV in find_own_property during backtrace construction

#551 [Bug]dynamic-stack-buffer-overflow read in JS_CallInternal: undersized call frame for the executed bytecode (CWE-125)

#550 [Bug]Heap-buffer-overflow read in JS_CallInternal: executing a function with empty (byte_code_len == 0) bytecode reads the first opcode past the buffer (CWE-125)

#549 [Bug]Heap-buffer-overflow WRITE in JS_ReadFunctionTag: negative count wraps the allocation size below the header size (CWE-787)

#548 [[Bug]Heap-buffer-overflow read in JS_DupAtom: ROM_DATA bytecode uses an unvalidated atom index (rt->atom_array OOB) (CWE-125)

#547 [Bug]Heap-buffer-overflow read in JS_ReadFunctionBytecode atom-fixup loop (get_u32 past the bytecode buffer) (CWE-125)

#546 Security findings: BigInt interrupt-bypass CPU DoS (verified) and 5 other issues — commit 04be246

#545 Security findings: BigInt interrupt-bypass CPU DoS and 5 other issues (commit 04be246)

#544 Support for RegExp buffer boundaries

#539 `TypeError` with code like `[1,2,3].values().map(n=>n).take(2).toArray()`

#538 `os.Worker` Can Call a NULL Context-Factory Callback in an Incompletely Initialized Embedder

#535 [BUG] Integer overflow in Proxy ownKeys property enumeration causes heap buffer overflow (32-bit)

#536 [BUG] Integer overflow in TypedArray.sort index allocation on 32-bit platforms

#537 [BUG] BigInt memory leak in Atomics.store on detached SharedArrayBuffer

#532 [BUG] qjs: SIGSEGV in __JS_FreeAtom with invalid atom index

#531 [BUG] qjs: SIGSEGV in has_with_scope with invalid scope level

#530 [BUG] qjs: assertion failure in resolve_variables under memory pressure

#529 [BUG] qjs: SIGSEGV in js_shape_hash_unlink during out-of-memory cleanup

#528 [BUG] qjs: SIGSEGV in get_first_lexical_var under memory pressure

#527 heap-use-after-free in `handle_posted_message`

#526 NewTypedArray accesses args past argc, producing invalid results

#520 Some regular expressions, which contain “-”, fail in “v” mode

#515 QuickJS LTO always_inline allocator failure