Bug 252083

Summary: ClonedArguments::isIteratorProtocolFastAndNonObservable() should check didTransition() earlier
Product: WebKit Reporter: Alexey Shvayka <ashvayka>
Component: JavaScriptCoreAssignee: Alexey Shvayka <ashvayka>
Status: RESOLVED FIXED    
Severity: Minor CC: mark.lam, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: All   
OS: All   

Alexey Shvayka
Reported 2023-02-10 15:11:59 PST
Currently structure->storedPrototypeObject()->needsSlowPutIndexing() may cause a crash.
Attachments
Add attachment proposed patch, testcase, etc.
Alexey Shvayka
Comment 1 2023-02-10 15:12:10 PST
rdar://105295643
Alexey Shvayka
Comment 2 2023-02-10 15:25:05 PST
Pull request: https://github.com/WebKit/WebKit/pull/9952
EWS
Comment 3 2023-02-10 21:40:39 PST
Committed 260145@main (146475121307): <https://commits.webkit.org/260145@main> Reviewed commits have been landed. Closing PR #9952 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.