Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 2f0cc5324e75a4c8b6d83745dc00360d15ab8182
https://github.com/WebKit/WebKit/commit/2f0cc5324e75a4c8b6d83745dc00360d15ab8182
Author: Yusuke Suzuki <ysuz...@apple.com>
Date: 2025-08-14 (Thu, 14 Aug 2025)
Changed paths:
A JSTests/stress/copy-data-properties-underscore-proto.js
M Source/JavaScriptCore/runtime/JSGlobalObjectFunctions.cpp
Log Message:
-----------
ASSERTION FAILED: !(attributes & (PropertyAttribute::Accessor |
PropertyAttribute::CustomAccessor | PropertyAttribute::ReadOnly))
https://bugs.webkit.org/show_bug.cgi?id=293578
rdar://152034597
Reviewed by Keith Miller.
Do not allow copyDataProperties fast path when source structure is
having __proto__ property.
* JSTests/stress/copy-data-properties-underscore-proto.js: Added.
(C0):
(const.v4.set __proto__):
* Source/JavaScriptCore/runtime/JSGlobalObjectFunctions.cpp:
(JSC::canPerformFastPropertyEnumerationForCopyDataProperties):
Originally-landed-as: 289651.541@safari-7621-branch (a59d9e4235bd).
rdar://157790814
Canonical link: https://commits.webkit.org/298705@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
