Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: de45b9be42db063e9d045f47c8d2a7628e5429df
      
https://github.com/WebKit/WebKit/commit/de45b9be42db063e9d045f47c8d2a7628e5429df
  Author: Yusuke Suzuki <[email protected]>
  Date:   2026-08-04 (Tue, 04 Aug 2026)

  Changed paths:
    M JSTests/wasm/stress/memory64-bulk-memory.js
    M Source/JavaScriptCore/wasm/WasmMemory.cpp
    M Source/JavaScriptCore/wasm/WasmMemory.h

  Log Message:
  -----------
  [JSC] Fix memory.init's overflow check
https://bugs.webkit.org/show_bug.cgi?id=321056
rdar://184086611

Reviewed by Dan Hecht.

Memory::init's overflow check is using uint32_t, but it is not correct
as memory64 is introduced. We use uint64_t instead. Also we drop dead
Memory::fill / Memory::copy implementations. Use Wasm::memoryCopy /
Wasm::memoryFill.

* JSTests/wasm/stress/memory64-bulk-memory.js:
(async testInitOperandTypes):
* Source/JavaScriptCore/wasm/WasmMemory.cpp:
(JSC::Wasm::Memory::init):
(JSC::Wasm::Memory::fill): Deleted.
(JSC::Wasm::Memory::copy): Deleted.
* Source/JavaScriptCore/wasm/WasmMemory.h:

Canonical link: https://commits.webkit.org/318617@main



To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications

Reply via email to