Bug 251059

Summary: [JSC] Resizable ArrayBuffer slice's end index should not be computed with updated byteLength
Product: WebKit Reporter: Yusuke Suzuki <ysuzuki>
Component: JavaScriptCoreAssignee: Yusuke Suzuki <ysuzuki>
Status: RESOLVED FIXED    
Severity: Normal CC: webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Yusuke Suzuki
Reported 2023-01-23 19:12:42 PST
...
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2023-01-23 19:12:58 PST
<rdar://problem/104584079>
Yusuke Suzuki
Comment 2 2023-01-23 19:13:24 PST
rdar://104551175
Yusuke Suzuki
Comment 3 2023-01-23 19:14:56 PST
Pull request: https://github.com/WebKit/WebKit/pull/9010
EWS
Comment 4 2023-01-23 20:10:26 PST
Committed 259260@main (a339b2fa21af): <https://commits.webkit.org/259260@main> Reviewed commits have been landed. Closing PR #9010 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.