Bug 260980

Summary:	[JSC] LLInt slow path of op_iterator_next doesn't always check m_done value
Product:	WebKit	Reporter:	Alexey Shvayka <ashvayka>
Component:	JavaScriptCore	Assignee:	Alexey Shvayka <ashvayka>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	All
OS:	All

Description Alexey Shvayka 2023-08-31 11:20:37 PDT

<rdar://114745586>

Comment 1 Alexey Shvayka 2023-08-31 13:23:55 PDT

Pull request: https://github.com/WebKit/WebKit/pull/17299

Comment 2 EWS 2023-08-31 15:47:05 PDT

Committed 267526@main (b3a4a487b56a): <https://commits.webkit.org/267526@main>

Reviewed commits have been landed. Closing PR #17299 and removing active labels.