Bug 252083

Summary:	ClonedArguments::isIteratorProtocolFastAndNonObservable() should check didTransition() earlier
Product:	WebKit	Reporter:	Alexey Shvayka <ashvayka>
Component:	JavaScriptCore	Assignee:	Alexey Shvayka <ashvayka>
Status:	RESOLVED FIXED
Severity:	Minor	CC:	mark.lam, webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	All
OS:	All

Description Alexey Shvayka 2023-02-10 15:11:59 PST

Currently structure->storedPrototypeObject()->needsSlowPutIndexing() may cause a crash.

Comment 1 Alexey Shvayka 2023-02-10 15:12:10 PST

rdar://105295643

Comment 2 Alexey Shvayka 2023-02-10 15:25:05 PST

Pull request: https://github.com/WebKit/WebKit/pull/9952

Comment 3 EWS 2023-02-10 21:40:39 PST

Committed 260145@main (146475121307): <https://commits.webkit.org/260145@main>

Reviewed commits have been landed. Closing PR #9952 and removing active labels.