CVE-2018-8618 Edge - Report a type confusion bug

Meghana Gupta · akroshg · commit 5db42187c3fd · 2018-12-10T10:53:13.000-08:00
diff --git a/lib/Backend/GlobOpt.cpp b/lib/Backend/GlobOpt.cpp
@@ -1840,6 +1840,10 @@ GlobOpt::IsAllowedForMemOpt(IR::Instr* instr, bool isMemset, IR::RegOpnd *baseOp
             return false;
         }
     }
+    else
+    {
+        return false;
+    }
 
     if (!baseValueType.IsTypedArray())
     {

Original file line number	Diff line number	Diff line change
`@@ -1840,6 +1840,10 @@ GlobOpt::IsAllowedForMemOpt(IR::Instr* instr, bool isMemset, IR::RegOpnd *baseOp`
`1840`	`1840`	`return false;`
`1841`	`1841`	`}`
`1842`	`1842`	`}`
	`1843`	`+ else`
	`1844`	`+ {`
	`1845`	`+ return false;`
	`1846`	`+ }`
`1843`	`1847`
`1844`	`1848`	`if (!baseValueType.IsTypedArray())`
`1845`	`1849`	`{`