Bug 258592 (CVE-2023-42833) - REGRESSION (264768@main): [JSC] isNaN should insert Check instead of fixup edge when converting it to constant
Summary: REGRESSION (264768@main): [JSC] isNaN should insert Check instead of fixup ed...
Status: RESOLVED FIXED
Alias: CVE-2023-42833
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Yusuke Suzuki
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2023-06-27 15:47 PDT by Yusuke Suzuki
Modified: 2024-02-05 14:33 PST (History)
3 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Yusuke Suzuki 2023-06-27 15:47:13 PDT 
...
Comment 1 Yusuke Suzuki 2023-06-27 15:47:20 PDT 
<rdar://problem/111223515>
Comment 2 Yusuke Suzuki 2023-06-27 15:48:07 PDT 
Pull request: https://github.com/WebKit/WebKit/pull/15349
Comment 3 EWS 2023-06-27 17:18:52 PDT 
Committed 265570@main (50ad0a17b352): <https://commits.webkit.org/265570@main>

Reviewed commits have been landed. Closing PR #15349 and removing active labels.