[webkit-changes] [WebKit/WebKit] 341ad9: [JSC] Iterator skipping should check protocol is i...

[Yusuke Suzuki]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 341ad994102bf3b9b2d7304c52dffd9b8bc4ca8a
      https://github.com/WebKit/WebKit/commit/341ad994102bf3b9b2d7304c52dffd9b8bc4ca8a
  Author: Yusuke Suzuki <ysuzuki at apple.com>
  Date:   2024-06-21 (Fri, 21 Jun 2024)

  Changed paths:
    M JSTests/stress/typed-array-from-array-iterator-protocol.js
    M Source/JavaScriptCore/runtime/JSGenericTypedArrayViewConstructorInlines.h

  Log Message:
  -----------
  [JSC] Iterator skipping should check protocol is intact too
https://bugs.webkit.org/show_bug.cgi?id=275724
rdar://114858904

Reviewed by Keith Miller.

To skip iterator's iteration, we need to ensure that next function of the array iterator is not changed (it means, array iterator protocol is still intact).
So we should check this quickly by using watchpoint check.

* JSTests/stress/typed-array-from-array-iterator-protocol.js:
* Source/JavaScriptCore/runtime/JSGenericTypedArrayViewConstructorInlines.h:
(JSC::constructGenericTypedArrayViewWithArguments):

Canonical link: https://commits.webkit.org/280240@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications