RESOLVED FIXED256551
CVE-2023-41074 [JSC] Refine Object.create modeling in DFG after mayBePrototype bit is mored to Structure 
https://bugs.webkit.org/show_bug.cgi?id=256551
Summary [JSC] Refine Object.create modeling in DFG after mayBePrototype bit is mored ...
Yusuke Suzuki
Reported 2023-05-09 14:35:17 PDT
...
Attachments
Add attachment proposed patch, testcase, etc.
Yusuke Suzuki
Comment 1 2023-05-09 14:35:19 PDT
<rdar://problem/109045428>
Yusuke Suzuki
Comment 2 2023-05-09 14:37:18 PDT
Pull request: https://github.com/WebKit/WebKit/pull/13658
EWS
Comment 3 2023-05-09 18:50:42 PDT
Committed 263889@main (d60bafb0be1b): <https://commits.webkit.org/263889@main> Reviewed commits have been landed. Closing PR #13658 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.