Bug 252083 - ClonedArguments::isIteratorProtocolFastAndNonObservable() should check didTransition() earlier
Summary: ClonedArguments::isIteratorProtocolFastAndNonObservable() should check didTra...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: WebKit Nightly Build
Hardware: All All
: P2 Minor
Assignee: Alexey Shvayka
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2023-02-10 15:11 PST by Alexey Shvayka
Modified: 2023-02-10 21:40 PST (History)
2 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Alexey Shvayka 2023-02-10 15:11:59 PST 
Currently structure->storedPrototypeObject()->needsSlowPutIndexing() may cause a crash.
Comment 1 Alexey Shvayka 2023-02-10 15:12:10 PST 
rdar://105295643
Comment 2 Alexey Shvayka 2023-02-10 15:25:05 PST 
Pull request: https://github.com/WebKit/WebKit/pull/9952
Comment 3 EWS 2023-02-10 21:40:39 PST 
Committed 260145@main (146475121307): <https://commits.webkit.org/260145@main>

Reviewed commits have been landed. Closing PR #9952 and removing active labels.