Bug 207082

Summary:

GetButterfly should check if the input value is an object in safe to execute

Product:

WebKit

Reporter:

Saam Barati <saam>

Component:

JavaScriptCore

Assignee:

Saam Barati <saam>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

benjamin, fpizlo, ggaren, gskachkov, guijemont, keith_miller, mark.lam, msaboff, rmorisset, ticaiolima, tzagallo, webkit-bug-importer, ysuzuki

Priority:

Keywords:

InRadar

Version:

WebKit Nightly Build

Hardware:

Unspecified

OS:

Unspecified

Bug Depends on:

Bug Blocks:

207075

Attachments:

Description	Flags
patch	mark.lam: review+

Description Saam Barati 2020-01-31 17:47:37 PST

...

Comment 1 Saam Barati 2020-01-31 17:57:07 PST

Created attachment 389447 [details]
patch

Comment 2 Mark Lam 2020-01-31 17:58:59 PST

Comment on attachment 389447 [details]
patch

View in context: https://bugs.webkit.org/attachment.cgi?id=389447&action=review

r=me

> Source/JavaScriptCore/ChangeLog:11
> +        for GetButterfly nodes's child1.

/nodes's/node's/

Comment 3 Saam Barati 2020-01-31 18:10:08 PST

landed in:
https://trac.webkit.org/changeset/255539/webkit

Comment 4 Radar WebKit Bug Importer 2020-01-31 18:11:19 PST

<rdar://problem/59082449>