Bug 260559 - [JSC] Throw OOM error if constructArrayNegativeIndexed() fails to allocate
Summary: [JSC] Throw OOM error if constructArrayNegativeIndexed() fails to allocate
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: WebKit Nightly Build
Hardware: All All
: P2 Normal
Assignee: Alexey Shvayka
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2023-08-22 16:52 PDT by Alexey Shvayka
Modified: 2023-08-25 14:29 PDT (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Alexey Shvayka 2023-08-22 16:52:52 PDT 
It's confirmed that clients of constructArrayNegativeIndexed() can correctly handle an exception being thrown.
Comment 1 Alexey Shvayka 2023-08-23 13:57:46 PDT 
<rdar://problem/114202373>
Comment 2 Alexey Shvayka 2023-08-23 13:58:09 PDT 
Pull request: https://github.com/WebKit/WebKit/pull/16988
Comment 3 EWS 2023-08-25 14:29:01 PDT 
Committed 267300@main (ddd9cbc5f5a7): <https://commits.webkit.org/267300@main>

Reviewed commits have been landed. Closing PR #16988 and removing active labels.