ITStudio_OUC/OxideJS-New
0
1
Fork 0
mirror of https://github.com/pjh456/OxideJS.git synced 2026-10-24 02:31:13 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: 删后裸读已知全局内置名经 A 侧抛 ReferenceError

Browse Source
This commit is contained in:
彭俊皓
2026-09-20 08:38:11 +00:00
parent f82cccbcdc
commit 9a502e634a
8 changed files with 333 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crates/oxide_bytecode/src/opcode.rs
+4 -3
View File
@@ -376,9 +376,10 @@ define_opcodes! {
LOAD_CONST = 0x32 => "LOAD_CONST",
def = Some(SlotSpec::Slot(Slot::Rd)), uses = [],
pure = true, jump = false, term = false, ic = false,
// 未声明标识符读：rd=目标，a/b=常量池 key 下标（imm16，与 LOAD_CONST 同构），
// 运行期查 global object 属性存在性，缺失抛 ReferenceError（热路径零开销：
// 已声明/内置标识符仍走 LOAD_VAR，本指令只命中真正未声明的读）。
// 未声明/已删标识符读：rd=目标，a/b=常量池 key 下标（imm16，与 LOAD_CONST 同构），
// 运行期查 global object 属性存在性，缺失抛 ReferenceError（未声明名与已知 builtin
// 名非局部遮蔽读均命中本指令：delete 后 A 侧缺失须经属性在位判定，镜像槽无法
// 自区分缺位与在位 undefined）。
LOAD_GLOBAL = 0x95 => "LOAD_GLOBAL",
def = Some(SlotSpec::Slot(Slot::Rd)), uses = [],
pure = false, jump = false, term = false, ic = false,