Skip to content

[v24.x] deps: backport V8 prototype retention fixes - #66089

Open
inoway46 wants to merge 2 commits into
nodejs:v24.x-stagingfrom
inoway46:codex/backport-66053-v24
Open

inoway46 wants to merge 2 commits into
nodejs:v24.x-stagingfrom
inoway46:codex/backport-66053-v24

Conversation

@inoway46

Copy link
Copy Markdown
Contributor

Fixes: #66053

Backport two V8 fixes:

Adapt to V8 13.6 APIs, add MapRef::is_extensible(), and increment v8_embedder_string per backport.

The reproduction hits OOM on v24.21.0 but completes with these V8 fixes. Refs:

Adapt deleted Context accesses and surrounding broker APIs to V8 13.6.

Original commit message:
  [compiler] Stop collecting array and object prototypes

  We can check in O(1) whether an object is either Object.prototype or
  Array.prototype by directly comparing it with the objects, so there's
  no need to collect them.

  Change-Id: Iadedf8b05cae3d67191fb4836c186620dc009118
  Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6487694
  Commit-Queue: Toon Verwaest <verwaest@chromium.org>
  Reviewed-by: Igor Sheludko <ishell@chromium.org>
  Commit-Queue: Igor Sheludko <ishell@chromium.org>
  Auto-Submit: Toon Verwaest <verwaest@chromium.org>
  Cr-Commit-Position: refs/heads/main@{#99894}

Refs: v8/v8@8901c79
Refs: nodejs#66053
Assisted-by: Codex
Signed-off-by: inoway46 <inoueyuya416@gmail.com>
Use the V8 13.6 ReadOnlyRoots API and add the missing bimodal
MapRef::is_extensible accessor. Adapt surrounding broker APIs and
the removed descriptor load to the v24 implementation.

Original commit message:
  [compiler] Thread-safe IsArrayOrObjectPrototype

  Bug: 467311868
  Change-Id: I574aa62d859030545e6a52d693a61e570381e557
  Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7460949
  Reviewed-by: Leszek Swirski <leszeks@chromium.org>
  Commit-Queue: Jakob Linke <jgruber@chromium.org>
  Cr-Commit-Position: refs/heads/main@{#104707}

Refs: v8/v8@c355350
Refs: nodejs#66053
Assisted-by: Codex
Signed-off-by: inoway46 <inoueyuya416@gmail.com>
@nodejs-github-bot

Copy link
Copy Markdown
Collaborator

Review requested:

  • @nodejs/gyp
  • @nodejs/security-wg
  • @nodejs/v8-update

@nodejs-github-bot nodejs-github-bot added build Issues and PRs related to Node.js builds or CI infrastructure. needs-ci PRs that need a full CI run. v24.x Issues that can be reproduced on v24.x or PRs targeting the v24.x-staging branch. v8 engine Issues and PRs related to the V8 dependency. labels Sep 17, 2026
@inoway46
inoway46 marked this pull request as ready for review September 17, 2026 14:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

build Issues and PRs related to Node.js builds or CI infrastructure. needs-ci PRs that need a full CI run. v8 engine Issues and PRs related to the V8 dependency. v24.x Issues that can be reproduced on v24.x or PRs targeting the v24.x-staging branch.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants