Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: e73985a506bdb55ff4a52b3b09cf3485ceb49676
https://github.com/WebKit/WebKit/commit/e73985a506bdb55ff4a52b3b09cf3485ceb49676
Author: Yusuke Suzuki <[email protected]>
Date: 2026-08-30 (Sun, 30 Aug 2026)
Changed paths:
M JSTests/test262/expectations.yaml
M Source/JavaScriptCore/runtime/JSGenericTypedArrayViewInlines.h
Log Message:
-----------
[JSC] TypedArray setFromTypedArray cannot use memmove when region is
intentionally overlapping and spec algorithm read back the modified result
https://bugs.webkit.org/show_bug.cgi?id=322892
rdar://186145219
Reviewed by Keith Miller.
TypedArray setFromTypedArray cannot use memmove when
1. region is overlapping
2. we end up reading the written result
memmove can avoid (2) by changing the scanning direction. But the spec algorithm
sometimes explicitly requests CopyType::LeftToRight, and in this case,
this reading the written value should be observable.
* JSTests/test262/expectations.yaml:
* Source/JavaScriptCore/runtime/JSGenericTypedArrayViewInlines.h:
(JSC::JSGenericTypedArrayView<Adaptor>::setFromTypedArray):
Canonical link: https://commits.webkit.org/320130@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
