Bug 251059

Summary:	[JSC] Resizable ArrayBuffer slice's end index should not be computed with updated byteLength
Product:	WebKit	Reporter:	Yusuke Suzuki <ysuzuki>
Component:	JavaScriptCore	Assignee:	Yusuke Suzuki <ysuzuki>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Description Yusuke Suzuki 2023-01-23 19:12:42 PST

...

Comment 1 Radar WebKit Bug Importer 2023-01-23 19:12:58 PST

<rdar://problem/104584079>

Comment 2 Yusuke Suzuki 2023-01-23 19:13:24 PST

rdar://104551175

Comment 3 Yusuke Suzuki 2023-01-23 19:14:56 PST

Pull request: https://github.com/WebKit/WebKit/pull/9010

Comment 4 EWS 2023-01-23 20:10:26 PST

Committed 259260@main (a339b2fa21af): <https://commits.webkit.org/259260@main>

Reviewed commits have been landed. Closing PR #9010 and removing active labels.