[webkit-changes] [WebKit/WebKit] facd98: Fix CallFrame::wasmInstance on 32-bits

aoikonomopoulos noreply at github.com
Tue Jul 30 13:17:28 PDT 2024


  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: facd9885abd1b94a72428f65b964827b6a1c1ea7
      https://github.com/WebKit/WebKit/commit/facd9885abd1b94a72428f65b964827b6a1c1ea7
  Author: Angelos Oikonomopoulos <angelos at igalia.com>
  Date:   2024-07-30 (Tue, 30 Jul 2024)

  Changed paths:
    M Source/JavaScriptCore/interpreter/CallFrame.cpp

  Log Message:
  -----------
  Fix CallFrame::wasmInstance on 32-bits
https://bugs.webkit.org/show_bug.cgi?id=277338

Reviewed by Justin Michaud.

On 32-bits, the codeblock cannot be treated as a JSValue. If we do that,
we're inadvertently using the adjacent callee as the tag, which leads
hits an assert in jsCast().

* Source/JavaScriptCore/interpreter/CallFrame.cpp:
(JSC::CallFrame::wasmInstance const):

Canonical link: https://commits.webkit.org/281592@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications


More information about the webkit-changes mailing list