Fix use-after-free: keep escaped handles alive when their escapable scope closes - #223

Merged

bkaradzic-microsoft merged 11 commits into

BabylonJS:mainfrom

bkaradzic-microsoft:pr/quickjs-escape-handle-uaf

Aug 18, 2026

Commits on Aug 13, 2026

Keep escaped handles alive when their escapable scope closes
bkaradzic
committed
111efc5
Drop the double-escape assertion from the shared test
bkaradzic
committed
a53b338
Keep gtest assertions on the test thread in the escape test
bkaradzic
committed
9af5307
Hold escaped handles aside instead of inserting them mid-stack

bkaradzic
and
Copilot
committed
c7e211d
Skip the double-escape test on backends where escaping is a no-op

bkaradzic
and
Copilot
committed
714bdb3
Publish the escape-handle capability from the napi target

bkaradzic
and
Copilot
committed
faf3657
Accept engines that only allow escaping from the innermost scope
bkaradzic
committed
6238b5a

Commits on Aug 18, 2026

Give escapable scopes a stable identity and make Chakra/JSC honour the escape contract

bghgary
and
Copilot
committed
927d952
Indent the escape tests' dispatched lambda bodies

bghgary
and
Copilot
committed
65676fd
Reject escape and close against scope tokens that are not open

bghgary
and
Copilot
committed
a8db9b0
Drop the closed-scope escape test and document the handle scope token

bghgary
and
Copilot
committed
461ee93