From 93bb027b687e8bcf0b71bd62e0c8ff2630dc93cc Mon Sep 17 00:00:00 2001 From: Aviv Keller Date: Thu, 1 Oct 2026 22:56:48 -0400 Subject: [PATCH] deps: V8: cherry-pick c795f5948568 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Original commit message: [immutable-array-buffer] Fix check order in TypedArray.prototype.set According to the spec, TypedArray.prototype.set checks IsImmutableBuffer(target.[[ViewedArrayBuffer]]) before converting the offset argument to integer and before reading from the source object. Additionally, when setting from a TypedArray source, reading from an immutable source TypedArray is permitted, so the source array should be validated using TypedArrayAccessMode::kRead rather than kWrite. Drive-By: Add a fast case for Smi indices where the steps are not observable and we can fold all checks. TAG=agy CONV=94aa3be8-9990-41fe-a565-c62e3daa9a42 Bug: 450237486 Change-Id: I21790be90cde9a96ba7c1f573f034016d9c29850 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8252528 Reviewed-by: Igor Sheludko Commit-Queue: Igor Sheludko Auto-Submit: Olivier Flückiger Cr-Commit-Position: refs/heads/main@{#109366} Refs: https://github.com/v8/v8/commit/c795f5948568dc7c5cce585928b9a6acb307ca82 Signed-off-by: Joyee Cheung PR-URL: https://github.com/nodejs/node/pull/65161 Reviewed-By: Antoine du Hamel Reviewed-By: Richard Lau --- common.gypi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/common.gypi b/common.gypi index 24ac3996976..73f2702bbeb 100644 --- a/common.gypi +++ b/common.gypi @@ -44,7 +44,7 @@ # Reset this number to 0 on major V8 upgrades. # Increment by one for each non-official patch applied to deps/v8. - 'v8_embedder_string': '-node.21', + 'v8_embedder_string': '-node.22', ##### V8 defaults for Node.js #####