Repository navigation
VM context object silently fails on Object.defineProperty #5679
Description
- Version: problem exists in 0.12.9 and later, does not exist in 0.10.36
- Platform: Darwin XXXX 14.3.0 Darwin Kernel Version 14.3.0: Mon Mar 23 11:59:05 PDT 2015; root:xnu-2782.20.48~5/RELEASE_X86_64 x86_64
- Subsystem: vm
The following script creates a VM context and runs a script that adds a property to that context, redefines that property as immutable, attempts to assign to that property, logs the error if there is one, then logs the value and property descriptor.
Expected behavior (exhibited in Node.js v0.10.36):
Cannot assign to read only property 'x' of #<Object>
20
{ value: 20,
writable: false,
enumerable: false,
configurable: false }
Actual behavior (exhibited in Node.js v4.3.1, v5.8.0):
Cannot assign to read only property 'x' of #<Object>
30
{ value: 30,
writable: true,
enumerable: true,
configurable: true }
var vm = require('vm');
var script = '(' + function () {
'use strict';
global.x = 10;
Object.defineProperty(global, 'x', {
writable: false,
enumerable: false,
configurable: false,
value: 20
});
try {
x = 30;
} catch (e) {
console.error(e);
}
console.log(x); // should be 20
console.log(Object.getOwnPropertyDescriptor(global, 'x'));
} + ')()';
var global = {};
global.console = console;
global.global = global;
var context = vm.createContext(global);
vm.runInContext(script, context);
cc @erights
Activity
princejwesley commentedon Mar 13, 2016
Duplicate of #5344 ?
kriskowal commentedon Mar 17, 2016
@princejwesley Very likely a duplicate. This is blocking Secure ECMAScript confinement. https://github.com/drses/ses5
kriskowal commentedon Apr 1, 2016
cc @domenic I am wondering whether you might be able to shine some light on the nature of VM context objects. What is special about the global object in a VM context that might make it hard to freeze properties?
tniessen commentedon Jun 3, 2017
This seems to work in node 7.x and 8.x, but not in 6.x and 4.x. Sadly, I cannot find the PR / commit which fixed the issue (maybe a v8 bug?). Do we want to backport the fix to 4.x / 6.x?
bnoordhuis commentedon Jun 3, 2017
There have been several commits that address this but I don't think they can be back-ported because some require extensive changes to V8.
I'll go ahead and close this out. People needing this feature should consider upgrading.
AnnaMag commentedon Jun 3, 2017
For the sake of completeness:
the attributes do not seem to be recovered correctly in node 7 nor 8 for me (the value is ok, but
all are
true).The behavior is fixed with this patch (with some extra V8 changes):
#13265
bnoordhuis commentedon Jun 3, 2017
Okay, I'll reopen pending #13265.
(Now that I think about it, I recall this being on track for node 9, not 8.)
kriskowal commentedon Jun 4, 2017
Confirmed that the issue is partially fixed.
fhinkel commentedon Oct 23, 2017
This is fixed in f1d6b04, see test/parallel/test-vm-global-non-writable-properties.js.
kriskowal commentedon Dec 12, 2017
Confirmed that this is fully fixed in 9.2.1.