[CVE-2018-0762] 2 crashes : jscript9!JsJavascriptOperatorsPatchGetMet…

…hodJsPolymorphicInlineCache - Palo Alto Networks, Inc.
chakra-core · Jan 5, 2018 · 51a6b6a · 51a6b6a
1 parent b0ff4cc
commit 51a6b6a
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/lib/Runtime/Types/DynamicObject.cpp b/lib/Runtime/Types/DynamicObject.cpp
@@ -524,8 +524,12 @@ namespace Js
 
     void DynamicObject::ChangeType()
     {
+        AutoDisableInterrupt autoDisableInterrupt(this->GetScriptContext()->GetThreadContext());
+
         Assert(!GetDynamicType()->GetIsShared() || GetTypeHandler()->GetIsShared());
         this->type = this->DuplicateType();
+
+        autoDisableInterrupt.Completed();
     }
 
     void DynamicObject::ChangeTypeIf(const Type* oldType)