emscripten-core / emscripten-core/emscripten
`Atomic` memory accesses in JS are not ASan-instrumented
Open
JavaScript
sanitizers
- Dominant language
- C++
- Stars
- 27.6k
- Forks
- 3.6k
- Avg merge
- 1d 1h
- Merged PRs (30d)
- 105
Description
The "asanify" transformation in acorn-optimizer.js does not instrument uses of the `Atomic` API in JS, so it's possible for e.g. use-after-free bugs involving atomic access from JS to go uncaught.
It would be nice to improve our ASan coverage by instrumenting atomic accesses as well.
Contributor guide
Assessment
This issue has not been assessed yet.