diff options
author | Tom Sepez <tsepez@chromium.org> | 2015-11-10 15:03:12 -0800 |
---|---|---|
committer | Tom Sepez <tsepez@chromium.org> | 2015-11-10 15:03:12 -0800 |
commit | 4f4603cc1b498bca3b1619006137e50ce80088c1 (patch) | |
tree | 9465160bf90344204f90e89e2df5a6698aba1135 /fpdfsdk/src/javascript/JS_Define.h | |
parent | ec0fbd3c334a09b9c9da781e3e1dffbce9bf0733 (diff) | |
download | pdfium-4f4603cc1b498bca3b1619006137e50ce80088c1.tar.xz |
Segv when PDF-side JS object property getter invoked from XFA.
The PDF-side native objects require that the current v8 context
has been set-up to point at the state (via CJS_Runtime) for the
getters, setters, and methods to operate against. XFA doesn't
supply a context with that state, so at the first opportunity for
a PDF-side object to be leaked to XFA, set up the context to mimic
the PDF side.
Changed FXJS_GetRuntimeFromIsolate() to FXJS_GetRuntimeFromV8Context()
for consistency with the newly added method.
BUG=pdfium:266
R=jochen@chromium.org
Review URL: https://codereview.chromium.org/1412103010 .
Diffstat (limited to 'fpdfsdk/src/javascript/JS_Define.h')
-rw-r--r-- | fpdfsdk/src/javascript/JS_Define.h | 27 |
1 files changed, 14 insertions, 13 deletions
diff --git a/fpdfsdk/src/javascript/JS_Define.h b/fpdfsdk/src/javascript/JS_Define.h index 3ebd07518e..b097aaa63f 100644 --- a/fpdfsdk/src/javascript/JS_Define.h +++ b/fpdfsdk/src/javascript/JS_Define.h @@ -78,8 +78,8 @@ void JSPropGetter(const char* prop_name_string, v8::Local<v8::String> property, const v8::PropertyCallbackInfo<v8::Value>& info) { v8::Isolate* isolate = info.GetIsolate(); - CJS_Runtime* pRuntime = - static_cast<CJS_Runtime*>(FXJS_GetRuntimeFromIsolate(isolate)); + CJS_Runtime* pRuntime = static_cast<CJS_Runtime*>( + FXJS_GetRuntimeFromV8Context(isolate->GetCurrentContext())); if (!pRuntime) return; IJS_Context* pContext = pRuntime->GetCurrentContext(); @@ -104,8 +104,8 @@ void JSPropSetter(const char* prop_name_string, v8::Local<v8::Value> value, const v8::PropertyCallbackInfo<void>& info) { v8::Isolate* isolate = info.GetIsolate(); - CJS_Runtime* pRuntime = - static_cast<CJS_Runtime*>(FXJS_GetRuntimeFromIsolate(isolate)); + CJS_Runtime* pRuntime = static_cast<CJS_Runtime*>( + FXJS_GetRuntimeFromV8Context(isolate->GetCurrentContext())); if (!pRuntime) return; IJS_Context* pContext = pRuntime->GetCurrentContext(); @@ -143,8 +143,8 @@ void JSMethod(const char* method_name_string, const char* class_name_string, const v8::FunctionCallbackInfo<v8::Value>& info) { v8::Isolate* isolate = info.GetIsolate(); - CJS_Runtime* pRuntime = - static_cast<CJS_Runtime*>(FXJS_GetRuntimeFromIsolate(isolate)); + CJS_Runtime* pRuntime = static_cast<CJS_Runtime*>( + FXJS_GetRuntimeFromV8Context(isolate->GetCurrentContext())); if (!pRuntime) return; IJS_Context* pContext = pRuntime->GetCurrentContext(); @@ -366,8 +366,8 @@ void JSSpecialPropGet(const char* class_name, v8::Local<v8::String> property, const v8::PropertyCallbackInfo<v8::Value>& info) { v8::Isolate* isolate = info.GetIsolate(); - CJS_Runtime* pRuntime = - static_cast<CJS_Runtime*>(FXJS_GetRuntimeFromIsolate(isolate)); + CJS_Runtime* pRuntime = static_cast<CJS_Runtime*>( + FXJS_GetRuntimeFromV8Context(isolate->GetCurrentContext())); if (!pRuntime) return; IJS_Context* pContext = pRuntime->GetCurrentContext(); @@ -393,8 +393,8 @@ void JSSpecialPropPut(const char* class_name, v8::Local<v8::Value> value, const v8::PropertyCallbackInfo<v8::Value>& info) { v8::Isolate* isolate = info.GetIsolate(); - CJS_Runtime* pRuntime = - static_cast<CJS_Runtime*>(FXJS_GetRuntimeFromIsolate(isolate)); + CJS_Runtime* pRuntime = static_cast<CJS_Runtime*>( + FXJS_GetRuntimeFromV8Context(isolate->GetCurrentContext())); if (!pRuntime) return; IJS_Context* pContext = pRuntime->GetCurrentContext(); @@ -417,7 +417,8 @@ void JSSpecialPropDel(const char* class_name, v8::Local<v8::String> property, const v8::PropertyCallbackInfo<v8::Boolean>& info) { v8::Isolate* isolate = info.GetIsolate(); - IJS_Runtime* pRuntime = FXJS_GetRuntimeFromIsolate(isolate); + IJS_Runtime* pRuntime = + FXJS_GetRuntimeFromV8Context(isolate->GetCurrentContext()); if (!pRuntime) return; IJS_Context* pContext = pRuntime->GetCurrentContext(); @@ -439,8 +440,8 @@ template <FX_BOOL ( *F)(IJS_Context*, const CJS_Parameters&, CJS_Value&, CFX_WideString&)> void JSGlobalFunc(const char* func_name_string, const v8::FunctionCallbackInfo<v8::Value>& info) { - CJS_Runtime* pRuntime = - static_cast<CJS_Runtime*>(FXJS_GetRuntimeFromIsolate(info.GetIsolate())); + CJS_Runtime* pRuntime = static_cast<CJS_Runtime*>( + FXJS_GetRuntimeFromV8Context(info.GetIsolate()->GetCurrentContext())); if (!pRuntime) return; IJS_Context* pContext = pRuntime->GetCurrentContext(); |