[webkit-changes] [WebKit/WebKit] 4314b6: Extr can overflow when imm=64, allowing a random r...

[Justin Michaud]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 4314b6ee6195aeb294402cce98bdb05dbdf83ad4
      https://github.com/WebKit/WebKit/commit/4314b6ee6195aeb294402cce98bdb05dbdf83ad4
  Author: Justin Michaud <justin_michaud at apple.com>
  Date:   2023-12-07 (Thu, 07 Dec 2023)

  Changed paths:
    M Source/JavaScriptCore/b3/B3LowerToAir.cpp
    M Source/JavaScriptCore/b3/air/AirValidate.cpp

  Log Message:
  -----------
  Extr can overflow when imm=64, allowing a random register to be read
rdar://118515062

Reviewed by Yusuke Suzuki.

Extr can overflow when imm=64, allowing a random register to be read.

* Source/JavaScriptCore/b3/B3LowerToAir.cpp:
* Source/JavaScriptCore/b3/air/AirValidate.cpp:

Originally-landed-as: 267815.574 at safari-7617-branch (49ba637c4abb). rdar://119327080
Canonical link: https://commits.webkit.org/271694@main