emscripten-core / emscripten-core/emscripten

`Atomic` memory accesses in JS are not ASan-instrumented

Open
#18,745 4 comments 1 reaction 0 assignees View on GitHub
JavaScript sanitizers
Dominant language
C++
Stars
27.6k
Forks
3.6k
Avg merge
1d 1h
Merged PRs (30d)
105

Description

The "asanify" transformation in acorn-optimizer.js does not instrument uses of the `Atomic` API in JS, so it's possible for e.g. use-after-free bugs involving atomic access from JS to go uncaught.

It would be nice to improve our ASan coverage by instrumenting atomic accesses as well.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.