Bug 252228 - constructFunctionSkippingEvalEnabledCheck() should use structureGlobalObject.
Summary: constructFunctionSkippingEvalEnabledCheck() should use structureGlobalObject.
Status: ASSIGNED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Mark Lam
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2023-02-13 21:56 PST by Mark Lam
Modified: 2023-02-13 22:01 PST (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Mark Lam 2023-02-13 21:56:10 PST 
constructFunctionSkippingEvalEnabledCheck() is instantiating JSFunction, JSGeneratorFunction, JSAsyncFunction, and JSAsyncGeneratorFunction with a structure from potentially another realm.  Hence, it should use the scope object from that realm as well.
Comment 1 Mark Lam 2023-02-13 21:58:01 PST 
<rdar://problem/105434457>
Comment 2 Radar WebKit Bug Importer 2023-02-13 21:59:38 PST 
<rdar://problem/105434535>
Comment 3 Mark Lam 2023-02-13 22:00:59 PST 
<rdar://problem/105434457>
Comment 4 Mark Lam 2023-02-13 22:01:42 PST 
Pull request: https://github.com/WebKit/WebKit/pull/10073