Skip to content

Fix async generator lifecycle bug - #1360

Merged
bnoordhuis merged 1 commit into
quickjs-ng:masterfrom
bnoordhuis:fix1355
Feb 19, 2026
Merged

Fix async generator lifecycle bug#1360
bnoordhuis merged 1 commit into
quickjs-ng:masterfrom
bnoordhuis:fix1355

Conversation

@bnoordhuis

Copy link
Copy Markdown
Contributor

Credit to Yuan (@Reset816) and xia0o0o0o (@KpwnZ) for the report and the test.

Fixes: #1355

Credit to Yuan (@Reset816) and xia0o0o0o (@KpwnZ) for the report and
the test.

Fixes: quickjs-ng#1355
@bnoordhuis
bnoordhuis merged commit 5d48f1d into quickjs-ng:master Feb 19, 2026
122 checks passed
@bnoordhuis
bnoordhuis deleted the fix1355 branch February 19, 2026 22:29
mochaaP pushed a commit to mcha-forks/quickjs that referenced this pull request May 20, 2026
Credit to Yuan (@Reset816) and xia0o0o0o (@KpwnZ) for the report and
the test.

Fixes: quickjs-ng#1355
(cherry picked from commit 5d48f1d)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

incorrect callback handling in promise resolution can lead to exploitable use-after-free

2 participants