Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: fac82297d3225011b6c4dce307f1a9f9ee163710
https://github.com/WebKit/WebKit/commit/fac82297d3225011b6c4dce307f1a9f9ee163710
Author: Daniel Liu <danl...@umich.edu>
Date: 2025-02-14 (Fri, 14 Feb 2025)
Changed paths:
M Source/JavaScriptCore/wasm/WasmOperationsInlines.h
Log Message:
-----------
arrayInitElem should check if the segment is null
https://bugs.webkit.org/show_bug.cgi?id=287677
rdar://144817380
Reviewed by Yijia Huang.
289530@main updated the handling of array_init_elem, but did not check
for if the segment is null. Thus, a debug assertion within copyElementSegment
could try to dereference a null pointer when checking the length.
* Source/JavaScriptCore/wasm/WasmOperationsInlines.h:
(JSC::Wasm::arrayInitElem):
Canonical link: https://commits.webkit.org/290405@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
