CVE-2018-8556

pleath · pleath · commit 2781608a34ea · 2018-11-09T12:28:19.000-08:00
diff --git a/lib/Backend/GlobOptBailOut.cpp b/lib/Backend/GlobOptBailOut.cpp
@@ -1306,7 +1306,7 @@ GlobOpt::MayNeedBailOnImplicitCall(IR::Instr const * instr, Value const * src1Va
         return
             !(
                 baseValueType.IsString() ||
-                (baseValueType.IsAnyArray() && baseValueType.GetObjectType() != ObjectType::ObjectWithArray) ||
+                baseValueType.IsArray() ||
                 (instr->HasBailOutInfo() && instr->GetBailOutKindNoBits() == IR::BailOutOnIrregularLength) // guarantees no implicit calls
             );
     }

Original file line number	Diff line number	Diff line change
`@@ -1306,7 +1306,7 @@ GlobOpt::MayNeedBailOnImplicitCall(IR::Instr const * instr, Value const * src1Va`
`1306`	`1306`	`return`
`1307`	`1307`	`!(`
`1308`	`1308`	`baseValueType.IsString() \|\|`
`1309`		`- (baseValueType.IsAnyArray() && baseValueType.GetObjectType() != ObjectType::ObjectWithArray) \|\|`
	`1309`	`+ baseValueType.IsArray() \|\|`
`1310`	`1310`	`(instr->HasBailOutInfo() && instr->GetBailOutKindNoBits() == IR::BailOutOnIrregularLength) // guarantees no implicit calls`
`1311`	`1311`	`);`
`1312`	`1312`	`}`